https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-1588.htmlhttps://patchthecve.com/cve/CVE-2026-1588.htmlWed, 17 Jun 2026 10:16:07 +0000LOW 2.7: A vulnerability was found in jishenghua jshERP up to 3.6. The impacted element is the function install of the file /jshERP-boot/plugin/installByPath of the component com.gitee.starblues.integration.operator.DefaultPluginOperator. The manipulation of the argument path results in path traversal. It ishttps://patchthecve.com/cve/CVE-2026-1549.htmlhttps://patchthecve.com/cve/CVE-2026-1549.htmlWed, 17 Jun 2026 10:16:03 +0000MEDIUM 4.3: A vulnerability was identified in jishenghua jshERP up to 3.6. Affected by this vulnerability is an unknown functionality of the file /jshERP-boot/plugin/uploadPluginConfigFile of the component PluginController. Such manipulation of the argument configFile leads to path traversal. The attack may be https://patchthecve.com/cve/CVE-2026-1546.htmlhttps://patchthecve.com/cve/CVE-2026-1546.htmlWed, 17 Jun 2026 10:16:02 +0000MEDIUM 6.3: A security vulnerability has been detected in jishenghua jshERP up to 3.6. The impacted element is the function getBillItemByParam of the file /jshERP-boot/depotItem/importItemExcel of the component com.jsh.erp.datasource.mappers.DepotItemMapperEx. The manipulation of the argument barCodes leads to https://patchthecve.com/cve/CVE-2025-67344.htmlhttps://patchthecve.com/cve/CVE-2025-67344.htmlWed, 14 Oct 2026 17:10:00 +0000MEDIUM 4.6: jshERP v3.5 and earlier is affected by a stored Cross Site Scripting (XSS) vulnerability via the /msg/add endpoint.https://patchthecve.com/cve/CVE-2025-67341.htmlhttps://patchthecve.com/cve/CVE-2025-67341.htmlWed, 14 Oct 2026 17:10:00 +0000MEDIUM 4.6: jshERP versions 3.5 and earlier are affected by a stored XSS vulnerability. This vulnerability allows attackers to upload PDF files containing XSS payloads. Additionally, these PDF files can be accessed via static URLs, making them accessible to all users.https://patchthecve.com/cve/CVE-2025-51746.htmlhttps://patchthecve.com/cve/CVE-2025-51746.htmlWed, 17 Jun 2026 09:35:50 +0000CRITICAL 9.8: An issue was discovered in jishenghua JSH_ERP 2.3.1. The /serialNumber/addSerialNumber endpoint is vulnerable to fastjson deserialization attacks.https://patchthecve.com/cve/CVE-2025-51745.htmlhttps://patchthecve.com/cve/CVE-2025-51745.htmlWed, 17 Jun 2026 09:35:50 +0000CRITICAL 9.8: An issue was discovered in jishenghua JSH_ERP 2.3.1. The /role/addcan endpoint is vulnerable to fastjson deserialization attacks.https://patchthecve.com/cve/CVE-2025-51744.htmlhttps://patchthecve.com/cve/CVE-2025-51744.htmlWed, 17 Jun 2026 09:35:50 +0000CRITICAL 9.8: An issue was discovered in jishenghua JSH_ERP 2.3.1. The /user/addUser endpoint is vulnerable to fastjson deserialization attacks.https://patchthecve.com/cve/CVE-2025-51743.htmlhttps://patchthecve.com/cve/CVE-2025-51743.htmlWed, 17 Jun 2026 09:35:48 +0000CRITICAL 9.8: An issue was discovered in jishenghua JSH_ERP 2.3.1. The /materialCategory/addMaterialCategory endpoint is vulnerable to fastjson deserialization attacks.https://patchthecve.com/cve/CVE-2025-51742.htmlhttps://patchthecve.com/cve/CVE-2025-51742.htmlWed, 17 Jun 2026 09:35:47 +0000CRITICAL 9.8: An issue was discovered in jishenghua JSH_ERP 2.3.1. The /material/getMaterialEnableSerialNumberList endpoint passes the search query parameter directly to parseObject(), introducing a Fastjson deserialization vulnerability that can lead to RCE via JDBC payloads.https://patchthecve.com/cve/CVE-2025-60800.htmlhttps://patchthecve.com/cve/CVE-2025-60800.htmlWed, 17 Jun 2026 09:50:07 +0000HIGH 7.5: Incorrect access control in the /jshERP-boot/user/info interface of jshERP up to commit 90c411a allows attackers to access sensitive information via a crafted GET request.https://patchthecve.com/cve/CVE-2025-60801.htmlhttps://patchthecve.com/cve/CVE-2025-60801.htmlWed, 17 Jun 2026 09:50:07 +0000HIGH 8.2: jshERP up to commit fbda24da was discovered to contain an unauthenticated remote code execution (RCE) vulnerability via the jsh_erp function.https://patchthecve.com/cve/CVE-2025-55371.htmlhttps://patchthecve.com/cve/CVE-2025-55371.htmlSun, 05 Jul 2026 02:16:56 +0000MEDIUM 5.3: Incorrect access control in the component /controller/PersonController.java of jshERP v3.5 allows unauthorized attackers to obtain all the information of the handler by executing the getAllList method.https://patchthecve.com/cve/CVE-2025-55370.htmlhttps://patchthecve.com/cve/CVE-2025-55370.htmlSun, 05 Jul 2026 02:16:55 +0000HIGH 8.8: Incorrect access control in the component \controller\ResourceController.java of jshERP v3.5 allows unauthorized attackers to obtain all the corresponding ID data by modifying the ID value.https://patchthecve.com/cve/CVE-2025-55368.htmlhttps://patchthecve.com/cve/CVE-2025-55368.htmlSun, 05 Jul 2026 02:16:55 +0000HIGH 8.8: Incorrect access control in the component \controller\RoleController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the supplier status under any account.https://patchthecve.com/cve/CVE-2025-55367.htmlhttps://patchthecve.com/cve/CVE-2025-55367.htmlSun, 05 Jul 2026 02:16:55 +0000MEDIUM 5.3: Incorrect access control in the component \controller\SupplierController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the supplier status under any account.https://patchthecve.com/cve/CVE-2025-55366.htmlhttps://patchthecve.com/cve/CVE-2025-55366.htmlSun, 05 Jul 2026 02:16:55 +0000MEDIUM 5.3: Incorrect access control in the component \controller\UserController.java of jshERP v3.5 allows attackers to arbitrarily reset user account passwords and execute a horizontal privilege escalation attack.https://patchthecve.com/cve/CVE-2025-8840.htmlhttps://patchthecve.com/cve/CVE-2025-8840.htmlWed, 17 Jun 2026 10:07:45 +0000MEDIUM 5.4: A vulnerability was determined in jshERP up to 3.5. Affected is an unknown function of the file /jshERP-boot/user/deleteBatch of the component Endpoint. The manipulation of the argument ids leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed https://patchthecve.com/cve/CVE-2025-8839.htmlhttps://patchthecve.com/cve/CVE-2025-8839.htmlWed, 17 Jun 2026 10:07:45 +0000MEDIUM 6.3: A vulnerability was found in jshERP up to 3.5. This issue affects some unknown processing of the file /jshERP-boot/user/addUser of the component Endpoint. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be uhttps://patchthecve.com/cve/CVE-2025-7948.htmlhttps://patchthecve.com/cve/CVE-2025-7948.htmlWed, 17 Jun 2026 10:06:01 +0000MEDIUM 4.3: A vulnerability classified as problematic was found in jshERP up to 3.5. Affected by this vulnerability is an unknown functionality of the file /jshERP-boot/user/updatePwd. The manipulation leads to weak password recovery. The attack can be launched remotely. The exploit has been disclosed to the puhttps://patchthecve.com/cve/CVE-2025-7947.htmlhttps://patchthecve.com/cve/CVE-2025-7947.htmlWed, 17 Jun 2026 10:06:01 +0000MEDIUM 5.4: A vulnerability classified as critical has been found in jshERP up to 3.5. Affected is an unknown function of the file /user/delete of the component Account Handler. The manipulation of the argument ID leads to improper authorization. It is possible to launch the attack remotely. The exploit has beehttps://patchthecve.com/cve/CVE-2025-7566.htmlhttps://patchthecve.com/cve/CVE-2025-7566.htmlWed, 17 Jun 2026 10:05:14 +0000MEDIUM 4.7: A vulnerability has been found in jshERP up to 3.5 and classified as critical. This vulnerability affects the function exportExcelByParam of the file /src/main/java/com/jsh/erp/controller/SystemConfigController.java. The manipulation of the argument Title leads to path traversal. The attack can be ihttps://patchthecve.com/cve/CVE-2024-24003.htmlhttps://patchthecve.com/cve/CVE-2024-24003.htmlWed, 17 Jun 2026 07:14:01 +0000CRITICAL 9.8: jshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseResponseInfo findInOutMaterialCount() function of jshERP does not filter `column` and `order` parameters well enough, and an attacker can construct malicious payload to bypass jshERP's phttps://patchthecve.com/cve/CVE-2024-24004.htmlhttps://patchthecve.com/cve/CVE-2024-24004.htmlWed, 17 Jun 2026 07:14:01 +0000CRITICAL 9.8: jshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseResponseInfo findInOutDetail() function of jshERP does not filter `column` and `order` parameters well enough, and an attacker can construct malicious payload to bypass jshERP's protectihttps://patchthecve.com/cve/CVE-2024-24002.htmlhttps://patchthecve.com/cve/CVE-2024-24002.htmlWed, 17 Jun 2026 07:14:01 +0000CRITICAL 9.8: jshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.MaterialController: com.jsh.erp.utils.BaseResponseInfo getListWithStock() function of jshERP does not filter `column` and `order` parameters well enough, and an attacker can construct malicious payload to bypass jshERP's protectihttps://patchthecve.com/cve/CVE-2024-24001.htmlhttps://patchthecve.com/cve/CVE-2024-24001.htmlWed, 17 Jun 2026 07:14:01 +0000CRITICAL 9.8: jshERP v3.3 is vulnerable to SQL Injection. via the com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseResponseInfo findallocationDetail() function of jshERP which allows an attacker to construct malicious payload to bypass jshERP's protection mechanism.https://patchthecve.com/cve/CVE-2024-24000.htmlhttps://patchthecve.com/cve/CVE-2024-24000.htmlWed, 17 Jun 2026 07:14:00 +0000CRITICAL 9.8: jshERP v3.3 is vulnerable to Arbitrary File Upload. The jshERP-boot/systemConfig/upload interface does not check the uploaded file type, and the biz parameter can be spliced into the upload path, resulting in arbitrary file uploads with controllable paths.https://patchthecve.com/cve/CVE-2023-48894.htmlhttps://patchthecve.com/cve/CVE-2023-48894.htmlWed, 17 Jun 2026 06:35:07 +0000MEDIUM 6.5: Incorrect Access Control vulnerability in jshERP V3.3 allows attackers to obtain sensitive information via the doFilter function.