Vulnerabilities in jishenghua
15 resultsVexday analysis
Jishenghua possui 6 vulnerabilidades catalogadas, com 3 publicadas nos últimos 90 dias, indicando atividade recente de descobertas. A fraqueza dominante é CWE-22 (path traversal), típica de problemas de validação de entrada. Não há evidência de exploração ativa em ataques, nem CVEs críticas, reduzindo a urgência imediata, mas o padrão de descobertas recentes recomenda monitoramento contínuo.
CVE-2026-1588MEDIUMjishenghua jshERP installByPath install path traversalEPSS 0.6%CVE-2026-94501HIGHjshERP through 3.6 Privilege Escalation via userBusiness CRUDEPSS 0.5%CVE-2026-94412HIGHjshERP through 3.6 Authorization Bypass via resetPwdEPSS 0.5%CVE-2026-94413HIGHjshERP through 3.6 Password Hash Disclosure via /user/infoEPSS 0.5%CVE-2026-94411HIGHjshERP 3.6 Privilege Escalation via updateOneValueByKeyIdAndTypeEPSS 0.5%CVE-2026-1549MEDIUMjishenghua jshERP PluginController uploadPluginConfigFile path traversalEPSS 0.5%CVE-2026-94496HIGHjshERP through 3.6 Privilege Escalation via Role ManagementEPSS 0.5%CVE-2026-94497HIGHjshERP through 3.6 Unauthorized Access via by-id EndpointsEPSS 0.5%CVE-2026-94495HIGHjshERP through 3.6 Missing Authorization via systemConfigEPSS 0.4%CVE-2026-94414MEDIUMjshERP through 3.6 Missing Authorization via updateBtnStrEPSS 0.4%CVE-2026-8320MEDIUMjishenghua jshERP updatePlatformConfigByKey Endpoint UserService.java getUserByWeixinCode server-side request forgeryEPSS 0.4%CVE-2026-94494MEDIUMjshERP through 3.6 Tenant Information Disclosure via GET /tenant/infoEPSS 0.4%CVE-2026-1546MEDIUMjishenghua jshERP com.jsh.erp.datasource.mappers.DepotItemMapperEx importItemExcel getBillItemByParam sql injectionEPSS 0.4%CVE-2026-11467MEDIUMjishenghua jshERP addAccountHeadAndDetail Endpoint AccountHeadService.java path traversalEPSS 0.3%CVE-2026-11469MEDIUMjishenghua jshERP platformConfig Add Endpoint PlatformConfigService.java insertPlatformConfig server-side request forgeryEPSS 0.2%