agentprime: jishenghua-jsherpEvery new CVE for jishenghua-jsherp.https://agentprime.io/CVE-2026-110615: jshERP through 3.6 Missing Authorization via /user/batchSetStatushttps://agentprime.io/advisories/CVE-2026-110615/https://agentprime.io/advisories/CVE-2026-110615/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 14:16:54 GMTCVECVE-2026-109188: jshERP through 3.6 Missing Authorization in Master Data Add and Import Endpointshttps://agentprime.io/advisories/CVE-2026-109188/https://agentprime.io/advisories/CVE-2026-109188/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 13:10:47 GMTCVECVE-2026-109187: jshERP through 3.6 Information Disclosure via /platformConfig/getInfoByKeyhttps://agentprime.io/advisories/CVE-2026-109187/https://agentprime.io/advisories/CVE-2026-109187/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 13:10:46 GMTCVECVE-2026-109186: jshERP through 3.6 Mass Assignment via PUT /user/updatehttps://agentprime.io/advisories/CVE-2026-109186/https://agentprime.io/advisories/CVE-2026-109186/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 13:10:45 GMTCVECVE-2026-109185: jshERP through 3.6 Privilege Escalation via PUT /user/updateUserhttps://agentprime.io/advisories/CVE-2026-109185/https://agentprime.io/advisories/CVE-2026-109185/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 13:10:44 GMTCVECVE-2026-109184: jshERP through 3.6 Data Scope Bypass via /account/findAccountInOutListhttps://agentprime.io/advisories/CVE-2026-109184/https://agentprime.io/advisories/CVE-2026-109184/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 13:10:44 GMTCVECVE-2026-109183: jshERP through 3.6 Approval Bypass via addDepotHeadAndDetail Status Parameterhttps://agentprime.io/advisories/CVE-2026-109183/https://agentprime.io/advisories/CVE-2026-109183/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 13:10:43 GMTCVECVE-2026-109182: jshERP through 3.6 Incorrect Authorization via /supplier/exportExcelhttps://agentprime.io/advisories/CVE-2026-109182/https://agentprime.io/advisories/CVE-2026-109182/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 13:10:42 GMTCVECVE-2026-109181: jshERP through 3.6 Authorization Bypass via purchaseStatus in /depotHead/listhttps://agentprime.io/advisories/CVE-2026-109181/https://agentprime.io/advisories/CVE-2026-109181/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 13:10:40 GMTCVECVE-2026-109180: jshERP through 3.6 Authorization Bypass via User-Controlled Warehouse IDshttps://agentprime.io/advisories/CVE-2026-109180/https://agentprime.io/advisories/CVE-2026-109180/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 13:10:39 GMTCVECVE-2026-109179: jshERP through 3.6 Missing Authorization via /log/list and /log/infohttps://agentprime.io/advisories/CVE-2026-109179/https://agentprime.io/advisories/CVE-2026-109179/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 13:10:39 GMTCVECVE-2026-109178: jshERP through 3.6 Missing Authorization via /log Audit Endpointshttps://agentprime.io/advisories/CVE-2026-109178/https://agentprime.io/advisories/CVE-2026-109178/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 13:10:38 GMTCVECVE-2026-105621: jishenghua jshERP Financial Receipt Update AccountHeadService.java updateAccountHeadAndDetail improper authorizationhttps://agentprime.io/advisories/CVE-2026-105621/https://agentprime.io/advisories/CVE-2026-105621/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 03:30:13 GMTCVECVE-2026-94501: jshERP through 3.6 Privilege Escalation via userBusiness CRUDhttps://agentprime.io/advisories/CVE-2026-94501/https://agentprime.io/advisories/CVE-2026-94501/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 18:16:19 GMTCVECVE-2026-94497: jshERP through 3.6 Unauthorized Access via by-id Endpointshttps://agentprime.io/advisories/CVE-2026-94497/https://agentprime.io/advisories/CVE-2026-94497/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 18:16:18 GMTCVECVE-2026-94496: jshERP through 3.6 Privilege Escalation via Role Managementhttps://agentprime.io/advisories/CVE-2026-94496/https://agentprime.io/advisories/CVE-2026-94496/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 18:16:17 GMTCVECVE-2026-94495: jshERP through 3.6 Missing Authorization via systemConfighttps://agentprime.io/advisories/CVE-2026-94495/https://agentprime.io/advisories/CVE-2026-94495/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 18:16:16 GMTCVECVE-2026-94494: jshERP through 3.6 Tenant Information Disclosure via GET /tenant/infohttps://agentprime.io/advisories/CVE-2026-94494/https://agentprime.io/advisories/CVE-2026-94494/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 18:16:14 GMTCVECVE-2026-94414: jshERP through 3.6 Missing Authorization via updateBtnStrhttps://agentprime.io/advisories/CVE-2026-94414/https://agentprime.io/advisories/CVE-2026-94414/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 18:16:13 GMTCVECVE-2026-94413: jshERP through 3.6 Password Hash Disclosure via /user/infohttps://agentprime.io/advisories/CVE-2026-94413/https://agentprime.io/advisories/CVE-2026-94413/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 18:16:12 GMTCVECVE-2026-94412: jshERP through 3.6 Authorization Bypass via resetPwdhttps://agentprime.io/advisories/CVE-2026-94412/https://agentprime.io/advisories/CVE-2026-94412/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 18:16:11 GMTCVECVE-2026-94411: jshERP 3.6 Privilege Escalation via updateOneValueByKeyIdAndTypehttps://agentprime.io/advisories/CVE-2026-94411/https://agentprime.io/advisories/CVE-2026-94411/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Sep 2026 18:16:10 GMTCVECVE-2026-11469: jishenghua jshERP platformConfig Add Endpoint PlatformConfigService.java insertPlatformConfig server-side request forgeryhttps://agentprime.io/advisories/CVE-2026-11469/https://agentprime.io/advisories/CVE-2026-11469/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 07 Jun 2026 23:45:07 GMTCVECVE-2026-11467: jishenghua jshERP addAccountHeadAndDetail Endpoint AccountHeadService.java path traversalhttps://agentprime.io/advisories/CVE-2026-11467/https://agentprime.io/advisories/CVE-2026-11467/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 07 Jun 2026 23:15:10 GMTCVECVE-2026-8320: jishenghua jshERP updatePlatformConfigByKey Endpoint UserService.java getUserByWeixinCode server-side request forgeryhttps://agentprime.io/advisories/CVE-2026-8320/https://agentprime.io/advisories/CVE-2026-8320/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 19:30:11 GMTCVECVE-2026-1588: jishenghua jshERP installByPath install path traversalhttps://agentprime.io/advisories/CVE-2026-1588/https://agentprime.io/advisories/CVE-2026-1588/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Jan 2026 13:32:06 GMTCVECVE-2026-1549: jishenghua jshERP PluginController uploadPluginConfigFile path traversalhttps://agentprime.io/advisories/CVE-2026-1549/https://agentprime.io/advisories/CVE-2026-1549/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Jan 2026 23:02:07 GMTCVECVE-2026-1546: jishenghua jshERP com.jsh.erp.datasource.mappers.DepotItemMapperEx importItemExcel getBillItemByParam sql injectionhttps://agentprime.io/advisories/CVE-2026-1546/https://agentprime.io/advisories/CVE-2026-1546/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Jan 2026 22:02:06 GMTCVE