Browse CVEs

MEDIUM 5.3 CVE-2025-55371 Incorrect access control in the component /controller/PersonController.java of jshERP v3.5 allows unauthorized attackers to obtain all the informatio… Jsherp No fix yet Fix from $1,6002025-08-21 HIGH 8.8 CVE-2025-55368 Incorrect access control in the component \controller\RoleController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the supp… Jsherp No fix yet Fix from $1,9502025-08-21 HIGH 8.8 CVE-2025-55370 Incorrect access control in the component \controller\ResourceController.java of jshERP v3.5 allows unauthorized attackers to obtain all the correspo… Jsherp No fix yet Fix from $1,9502025-08-21 MEDIUM 5.3 CVE-2025-55366 Incorrect access control in the component \controller\UserController.java of jshERP v3.5 allows attackers to arbitrarily reset user account passwords… Jsherp No fix yet Fix from $1,6002025-08-21 MEDIUM 5.3 CVE-2025-55367 Incorrect access control in the component \controller\SupplierController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the … Jsherp No fix yet Fix from $1,6002025-08-21 MEDIUM 5.4 CVE-2025-8840 A vulnerability was determined in jshERP up to 3.5. Affected is an unknown function of the file /jshERP-boot/user/deleteBatch of the component Endpoi… Jsherp No fix yet Fix from $1,6002025-08-11 HIGH 8.8 CVE-2025-8839 A vulnerability was found in jshERP up to 3.5. This issue affects some unknown processing of the file /jshERP-boot/user/addUser of the component Endp… Jsherp No fix yet Fix from $1,9502025-08-11 CRITICAL 9.8 CVE-2024-24003 jshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseResponseInfo findInOutMaterialCount… Jsherp No fix yet Fix from $2,3002024-02-08 CRITICAL 9.8 CVE-2024-24001 jshERP v3.3 is vulnerable to SQL Injection. via the com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseResponseInfo findallocationDeta… Jsherp No fix yet Fix from $2,3002024-02-07 CRITICAL 9.8 CVE-2024-24002 jshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.MaterialController: com.jsh.erp.utils.BaseResponseInfo getListWithStock() func… Jsherp No fix yet Fix from $2,3002024-02-07 CRITICAL 9.8 CVE-2024-24004 jshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseResponseInfo findInOutDetail() func… Jsherp No fix yet Fix from $2,3002024-02-07