J
Vendor security profile
jishenghua
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs29
Critical0
CISA KEV0
Public exploit25
Patch rate%0
Avg. CVSS6.5
12-month vulnerability rate
0
2
0
0
0
0
0
0
0
0
9
13
CVE KEV
CVE severity distribution
29toplam CVE
High12 (41%)
Medium17 (59%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%86
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
29Unknown
Latest vulnerabilities
7.1
CVE-2026-110615
jshERP through 3.6 Missing Authorization via /user/batchSetStatus
J
Patch status unknown
5.3
CVE-2026-109188
jshERP through 3.6 Missing Authorization in Master Data Add and Import Endpoints
J
Patch status unknownEPSS %0
7.1
CVE-2026-109187
jshERP through 3.6 Information Disclosure via /platformConfig/getInfoByKey
J
Patch status unknownEPSS %0
8.7
CVE-2026-109186
jshERP through 3.6 Mass Assignment via PUT /user/update
J
Patch status unknownEPSS %0
8.7
CVE-2026-109185
jshERP through 3.6 Privilege Escalation via PUT /user/updateUser
J
Patch status unknownEPSS %0
5.3
CVE-2026-109184
jshERP through 3.6 Data Scope Bypass via /account/findAccountInOutList
J
Patch status unknownEPSS %0
5.3
CVE-2026-109183
jshERP through 3.6 Approval Bypass via addDepotHeadAndDetail Status Parameter
J
Patch status unknownEPSS %0
5.3
CVE-2026-109182
jshERP through 3.6 Incorrect Authorization via /supplier/exportExcel
J
Patch status unknownEPSS %0
5.3
CVE-2026-109181
jshERP through 3.6 Authorization Bypass via purchaseStatus in /depotHead/list
J
Patch status unknownEPSS %0
5.3
CVE-2026-109180
jshERP through 3.6 Authorization Bypass via User-Controlled Warehouse IDs
J
Patch status unknownEPSS %0