Advisories · Technology
jshERP.
Every CVE that names jshERP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
jshERP Endpoint deleteBatch improper authorization
- jshERP
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
jshERP Endpoint addUser improper authorization
- jshERP
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
jshERP updatePwd password recovery
- jshERP
- CWE-640
- CVSS 5.3 Medium
jshERP Account delete improper authorization
- jshERP
- Privilege escalation
- Broken access control
- CVSS 5.1 Medium
jshERP SystemConfigController.java exportExcelByParam path traversal
- jshERP
- Path traversal