Vulnerabilidades em jishenghua

28 resultados
Análise Vexday

Jishenghua possui 6 vulnerabilidades catalogadas, com 3 publicadas nos últimos 90 dias, indicando atividade recente de descobertas. A fraqueza dominante é CWE-22 (path traversal), típica de problemas de validação de entrada. Não há evidência de exploração ativa em ataques, nem CVEs críticas, reduzindo a urgência imediata, mas o padrão de descobertas recentes recomenda monitoramento contínuo.

CVE-2026-1588MEDIUMjishenghua jshERP installByPath install path traversalEPSS 0.7%CVE-2026-94412HIGHjshERP through 3.6 Authorization Bypass via resetPwdEPSS 0.5%CVE-2026-94413HIGHjshERP through 3.6 Password Hash Disclosure via /user/infoEPSS 0.5%CVE-2026-94501HIGHjshERP through 3.6 Privilege Escalation via userBusiness CRUDEPSS 0.5%CVE-2026-94411HIGHjshERP 3.6 Privilege Escalation via updateOneValueByKeyIdAndTypeEPSS 0.5%CVE-2026-1549MEDIUMjishenghua jshERP PluginController uploadPluginConfigFile path traversalEPSS 0.5%CVE-2026-94496HIGHjshERP through 3.6 Privilege Escalation via Role ManagementEPSS 0.5%CVE-2026-94497HIGHjshERP through 3.6 Unauthorized Access via by-id EndpointsEPSS 0.5%CVE-2026-94495HIGHjshERP through 3.6 Missing Authorization via systemConfigEPSS 0.4%CVE-2026-110615HIGHjshERP through 3.6 Missing Authorization via /user/batchSetStatusEPSS 0.4%CVE-2026-94414MEDIUMjshERP through 3.6 Missing Authorization via updateBtnStrEPSS 0.4%CVE-2026-1546MEDIUMjishenghua jshERP com.jsh.erp.datasource.mappers.DepotItemMapperEx importItemExcel getBillItemByParam sql injectionEPSS 0.4%CVE-2026-94494MEDIUMjshERP through 3.6 Tenant Information Disclosure via GET /tenant/infoEPSS 0.4%CVE-2026-109186HIGHjshERP through 3.6 Mass Assignment via PUT /user/updateEPSS 0.4%CVE-2026-11467MEDIUMjishenghua jshERP addAccountHeadAndDetail Endpoint AccountHeadService.java path traversalEPSS 0.3%CVE-2026-109185HIGHjshERP through 3.6 Privilege Escalation via PUT /user/updateUserEPSS 0.3%CVE-2026-109188MEDIUMjshERP through 3.6 Missing Authorization in Master Data Add and Import EndpointsEPSS 0.3%CVE-2026-109187HIGHjshERP through 3.6 Information Disclosure via /platformConfig/getInfoByKeyEPSS 0.2%CVE-2026-109180MEDIUMjshERP through 3.6 Authorization Bypass via User-Controlled Warehouse IDsEPSS 0.2%CVE-2026-11469MEDIUMjishenghua jshERP platformConfig Add Endpoint PlatformConfigService.java insertPlatformConfig server-side request forgeryEPSS 0.2%