PatchTheCVEhuaxiaerp vulnerabilities
Recent CVEs affecting huaxiaerp products. 4 tracked.
huaxiaerp has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-02-06. Highest priority: CVE-2024-24000 (score 52/100).
- CVE-2024-24000 CRITICAL 9.8 DOWNGRADE jshERP v3.3 is vulnerable to Arbitrary File Upload
- CVE-2024-0491 MEDIUM 5.3 UPGRADE A vulnerability classified as problematic has been found in Huaxia ERP up to 3.1
- CVE-2024-0490 MEDIUM 5.3 UPGRADE A vulnerability was found in Huaxia ERP up to 3.1
- CVE-2023-48894 MEDIUM 6.5 DOWNGRADE Incorrect Access Control vulnerability in jshERP V3.3 allows attackers to obtain sensitive information via the
FAQ
How do I fix huaxiaerp vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is huaxiaerp being exploited right now?
None of the tracked huaxiaerp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which huaxiaerp CVE should I patch first?
CVE-2024-24000 currently ranks highest (52/100): jshERP v3.3 is vulnerable to Arbitrary File Upload.