Vulnerability index

Browse CVEs

11 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Jsherp MEDIUM 5.3
CVE-2025-55371

Incorrect access control in the component /controller/PersonController.java of jshERP v3.5 allows unauthorized attackers to obtain all the informatio…

No fix yet
Fix from $1,600 2025-08-21
Jsherp HIGH 8.8
CVE-2025-55368

Incorrect access control in the component \controller\RoleController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the supp…

No fix yet
Fix from $1,950 2025-08-21
Jsherp HIGH 8.8
CVE-2025-55370

Incorrect access control in the component \controller\ResourceController.java of jshERP v3.5 allows unauthorized attackers to obtain all the correspo…

No fix yet
Fix from $1,950 2025-08-21
Jsherp MEDIUM 5.3
CVE-2025-55366

Incorrect access control in the component \controller\UserController.java of jshERP v3.5 allows attackers to arbitrarily reset user account passwords…

No fix yet
Fix from $1,600 2025-08-21
Jsherp MEDIUM 5.3
CVE-2025-55367

Incorrect access control in the component \controller\SupplierController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the …

No fix yet
Fix from $1,600 2025-08-21
Jsherp MEDIUM 5.4
CVE-2025-8840

A vulnerability was determined in jshERP up to 3.5. Affected is an unknown function of the file /jshERP-boot/user/deleteBatch of the component Endpoi…

No fix yet
Fix from $1,600 2025-08-11
Jsherp HIGH 8.8
CVE-2025-8839

A vulnerability was found in jshERP up to 3.5. This issue affects some unknown processing of the file /jshERP-boot/user/addUser of the component Endp…

No fix yet
Fix from $1,950 2025-08-11
Jsherp CRITICAL 9.8
CVE-2024-24003

jshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseResponseInfo findInOutMaterialCount…

No fix yet
Fix from $2,300 2024-02-08
Jsherp CRITICAL 9.8
CVE-2024-24001

jshERP v3.3 is vulnerable to SQL Injection. via the com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseResponseInfo findallocationDeta…

No fix yet
Fix from $2,300 2024-02-07
Jsherp CRITICAL 9.8
CVE-2024-24002

jshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.MaterialController: com.jsh.erp.utils.BaseResponseInfo getListWithStock() func…

No fix yet
Fix from $2,300 2024-02-07
Jsherp CRITICAL 9.8
CVE-2024-24004

jshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseResponseInfo findInOutDetail() func…

No fix yet
Fix from $2,300 2024-02-07