Login Request a demo
JI
Vendor
jishenghua
1 product with CVEs on record
51
CVEs
0
On KEV
13
New 30D
Products
JS
jshERP
jishenghua
9.8
51 CVEs0 on KEV13 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-110615
JS
jshERP
jishenghua
7.1
0%
Oct 14jshERP through 3.6 Missing Authorization via /user/batchSetStatus
CVE-2026-109188
JS
jshERP
jishenghua
4.3
0%
Oct 12jshERP through 3.6 Missing Authorization in Master Data Add and Import Endpoints
CVE-2026-109187
JS
jshERP
jishenghua
6.5
0%
Oct 12jshERP through 3.6 Information Disclosure via /platformConfig/getInfoByKey
CVE-2026-109186
JS
jshERP
jishenghua
8.8
0%
Oct 12jshERP through 3.6 Mass Assignment via PUT /user/update
CVE-2026-109185
JS
jshERP
jishenghua
8.8
0%
Oct 12jshERP through 3.6 Privilege Escalation via PUT /user/updateUser
CVE-2026-109184
JS
jshERP
jishenghua
4.3
0%
Oct 12jshERP through 3.6 Data Scope Bypass via /account/findAccountInOutList
CVE-2026-109183
JS
jshERP
jishenghua
4.3
0%
Oct 12jshERP through 3.6 Approval Bypass via addDepotHeadAndDetail Status Parameter
CVE-2026-109182
JS
jshERP
jishenghua
4.3
0%
Oct 12jshERP through 3.6 Incorrect Authorization via /supplier/exportExcel
CVE-2026-109181
JS
jshERP
jishenghua
4.3
0%
Oct 12jshERP through 3.6 Authorization Bypass via purchaseStatus in /depotHead/list
CVE-2026-109180
JS
jshERP
jishenghua
4.3
0%
Oct 12jshERP through 3.6 Authorization Bypass via User-Controlled Warehouse IDs
CVE-2026-109179
JS
jshERP
jishenghua
4.3
0%
Oct 12jshERP through 3.6 Missing Authorization via /log/list and /log/info
CVE-2026-109178
JS
jshERP
jishenghua
5.4
0%
Oct 12jshERP through 3.6 Missing Authorization via /log Audit Endpoints
CVE-2026-105621
JS
jshERP
jishenghua
5.4
0%
Oct 6jishenghua jshERP Financial Receipt Update AccountHeadService.java updateAccountHeadAndDetail improper authorization
CVE-2026-94501
JS
jshERP
jishenghua
8.8
1%
Sep 21jshERP through 3.6 Privilege Escalation via userBusiness CRUD
CVE-2026-94497
JS
jshERP
jishenghua
8.3
0%
Sep 21jshERP through 3.6 Unauthorized Access via by-id Endpoints
CVE-2026-94496
JS
jshERP
jishenghua
8.3
0%
Sep 21jshERP through 3.6 Privilege Escalation via Role Management
CVE-2026-94495
JS
jshERP
jishenghua
7.1
0%
Sep 21jshERP through 3.6 Missing Authorization via systemConfig
CVE-2026-94494
JS
jshERP
jishenghua
5.0
0%
Sep 21jshERP through 3.6 Tenant Information Disclosure via GET /tenant/info
CVE-2026-94414
JS
jshERP
jishenghua
5.4
0%
Sep 21jshERP through 3.6 Missing Authorization via updateBtnStr
CVE-2026-94413
JS
jshERP
jishenghua
6.5
1%
Sep 21jshERP through 3.6 Password Hash Disclosure via /user/info
CVE-2026-94412
JS
jshERP
jishenghua
8.8
1%
Sep 21jshERP through 3.6 Authorization Bypass via resetPwd
CVE-2026-94411
JS
jshERP
jishenghua
8.8
1%
Sep 21jshERP 3.6 Privilege Escalation via updateOneValueByKeyIdAndType
CVE-2026-11469
JS
jshERP
jishenghua
4.7
0%
Jun 7jishenghua jshERP platformConfig Add Endpoint PlatformConfigService.java insertPlatformConfig server-side request forgery
CVE-2026-11467
JS
jshERP
jishenghua
5.4
0%
Jun 7jishenghua jshERP addAccountHeadAndDetail Endpoint AccountHeadService.java path traversal
CVE-2026-8320
JS
jshERP
jishenghua
4.7
0%
May 11jishenghua jshERP updatePlatformConfigByKey Endpoint UserService.java getUserByWeixinCode server-side request forgery
CVE-2026-1588
JS
jshERP
jishenghua
2.7
1%
Jan 29jishenghua jshERP installByPath install path traversal
CVE-2026-1549
JS
jshERP
jishenghua
4.3
1%
Jan 28jishenghua jshERP PluginController uploadPluginConfigFile path traversal
CVE-2026-1546
JS
jshERP
jishenghua
9.8
0%
Jan 28jishenghua jshERP com.jsh.erp.datasource.mappers.DepotItemMapperEx importItemExcel getBillItemByParam sql injection
CVE-2025-67344
JS
Jsherp
Jishenghua
4.6
0%
Dec 12jshERP v3.5 and earlier is affected by a stored Cross Site Scripting (XSS) vulnerability via the /msg/add endpoint
CVE-2025-67341
JS
Jsherp
Jishenghua
4.6
0%
Dec 12jshERP versions 3.5 and earlier are affected by a stored XSS vulnerability
CVE-2025-51746
JS
Jsherp
Jishenghua
9.8
1%
Nov 25An issue was discovered in jishenghua JSH_ERP 2.3.1
CVE-2025-51745
JS
Jsherp
Jishenghua
9.8
1%
Nov 25An issue was discovered in jishenghua JSH_ERP 2.3.1
CVE-2025-51744
JS
Jsherp
Jishenghua
9.8
1%
Nov 25An issue was discovered in jishenghua JSH_ERP 2.3.1
CVE-2025-51743
JS
Jsherp
Jishenghua
9.8
1%
Nov 25An issue was discovered in jishenghua JSH_ERP 2.3.1
CVE-2025-51742
JS
Jsherp
Jishenghua
9.8
1%
Nov 25An issue was discovered in jishenghua JSH_ERP 2.3.1
CVE-2025-60800
JS
Jsherp
Jishenghua
7.5
0%
Oct 28Incorrect access control in the /jshERP-boot/user/info interface of jshERP up to commit 90c411a allows attackers to access sensitive information via a crafted GET request
CVE-2025-60801
JS
Jsherp
Jishenghua
8.2
0%
Oct 24jshERP up to commit fbda24da was discovered to contain an unauthenticated remote code execution (RCE) vulnerability via the jsh_erp function
CVE-2025-55371
JS
Jsherp
Jishenghua
5.3
0%
Aug 21Incorrect access control in the component /controller/PersonController.java of jshERP v3.5 allows unauthorized attackers to obtain all the information of the handler by executing…
CVE-2025-55370
JS
Jsherp
Jishenghua
8.8
0%
Aug 21Incorrect access control in the component \controller\ResourceController.java of jshERP v3.5 allows unauthorized attackers to obtain all the corresponding ID data by modifying the…
CVE-2025-55368
JS
Jsherp
Jishenghua
8.8
0%
Aug 21Incorrect access control in the component \controller\RoleController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the supplier status under any account
CVE-2025-55367
JS
Jsherp
Jishenghua
5.3
0%
Aug 21Incorrect access control in the component \controller\SupplierController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the supplier status under any…
CVE-2025-55366
JS
Jsherp
Jishenghua
5.3
0%
Aug 21Incorrect access control in the component \controller\UserController.java of jshERP v3.5 allows attackers to arbitrarily reset user account passwords and execute a horizontal…
CVE-2025-8840
JS
Jsherp
Jishenghua
5.4
0%
Aug 11A vulnerability was determined in jshERP up to 3.5
CVE-2025-8839
JS
Jsherp
Jishenghua
8.8
0%
Aug 11A vulnerability was found in jshERP up to 3.5
CVE-2025-7948
JS
Jsherp
Jishenghua
6.5
0%
Jul 22A vulnerability classified as problematic was found in jshERP up to 3.5
CVE-2025-7947
JS
Jsherp
Jishenghua
8.1
0%
Jul 22A vulnerability classified as critical has been found in jshERP up to 3.5
CVE-2025-7566
JS
Jsherp
Jishenghua
7.2
1%
Jul 14A vulnerability has been found in jshERP up to 3.5 and classified as critical
CVE-2024-24003
JS
Jsherp
Jishenghua
9.8
1%
Feb 8jshERP v3.3 is vulnerable to SQL Injection
CVE-2024-24004
JS
Jsherp
Jishenghua
9.8
1%
Feb 7jshERP v3.3 is vulnerable to SQL Injection
CVE-2024-24002
JS
Jsherp
Jishenghua
9.8
1%
Feb 7jshERP v3.3 is vulnerable to SQL Injection
CVE-2024-24001
JS
Jsherp
Jishenghua
9.8
1%
Feb 7jshERP v3.3 is vulnerable to SQL Injection