Vulnerabilities

TI-2024-15963 CVE-2024-24000 · GHSA-6xj8-7c6f-w9rq

jshERP v3.3 is vulnerable to Arbitrary File Upload.

MEDIUM 43

jshERP v3.3 is vulnerable to Arbitrary File Upload.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0064 Published 2024-02-06 No fix listed CWE-434

TI-2024-00450 CVE-2024-0491 · GHSA-734x-3wjx-2xxp

MEDIUM 40

A vulnerability classified as problematic has been found in Huaxia ERP up to 3.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00596 Published 2024-01-13 No fix listed CWE-640

TI-2024-00449 CVE-2024-0490 · GHSA-69fr-jp7w-hjmr

MEDIUM 40

A vulnerability was found in Huaxia ERP up to 3.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00739 Published 2024-01-13 No fix listed CWE-200

TI-2023-26674 CVE-2023-48894 · GHSA-vwqh-rcfq-pqf7

LOW 30

Incorrect Access Control vulnerability in jshERP V3.3 allows attackers to obtain sensitive information via the doFilter function.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00621 Published 2023-11-30 No fix listed

TI-2022-03506 CVE-2022-3826 · GHSA-5f82-vr86-8p9j

MEDIUM 62

A vulnerability was found in Huaxia ERP.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00837 Published 2022-11-02 No fix listed CWE-266

TI-2022-03505 CVE-2022-3825 · GHSA-g3xg-5gwh-p55f

MEDIUM 62

A vulnerability was found in Huaxia ERP 2.3 and classified as critical.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00689 Published 2022-11-02 No fix listed CWE-707