Threat database

5 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.8	EPSS 0.5%	CVE-2025-51746JSH_ERP · Deserialization of Untrusted Data Critical9.8EPSS 0.5%2025-11-25CVE Database V5CVE-2025-51746 An issue was discovered in jishenghua JSH_ERP 2.3.1. The /serialNumber/addSerialNumber endpoint is vulnerable to fastjson deserialization attacks. EPSS 0.5%Vulnerability CWE-502	CVE Database V5	2025-11-25
Critical	9.8	EPSS 0.5%	CVE-2025-51745JSH_ERP · Deserialization of Untrusted Data Critical9.8EPSS 0.5%2025-11-25CVE Database V5CVE-2025-51745 An issue was discovered in jishenghua JSH_ERP 2.3.1. The /role/addcan endpoint is vulnerable to fastjson deserialization attacks. EPSS 0.5%Vulnerability CWE-502	CVE Database V5	2025-11-25
Critical	9.8	EPSS 0.5%	CVE-2025-51744JSH_ERP · Deserialization of Untrusted Data Critical9.8EPSS 0.5%2025-11-25CVE Database V5CVE-2025-51744 An issue was discovered in jishenghua JSH_ERP 2.3.1. The /user/addUser endpoint is vulnerable to fastjson deserialization attacks. EPSS 0.5%Vulnerability CWE-502	CVE Database V5	2025-11-25
Critical	9.8	EPSS 0.5%	CVE-2025-51743JSH_ERP · Deserialization of Untrusted Data Critical9.8EPSS 0.5%2025-11-25CVE Database V5CVE-2025-51743 An issue was discovered in jishenghua JSH_ERP 2.3.1. The /materialCategory/addMaterialCategory endpoint is vulnerable to fastjson deserialization attacks. EPSS 0.5%Vulnerability CWE-502	CVE Database V5	2025-11-25
Critical	9.8	EPSS 0.5%	CVE-2025-51742JSH_ERP · Deserialization of Untrusted Data Critical9.8EPSS 0.5%2025-11-25CVE Database V5CVE-2025-51742 An issue was discovered in jishenghua JSH_ERP 2.3.1. The /material/getMaterialEnableSerialNumberList endpoint passes the search query parameter directly to parseObject(), introducing a Fastjson deserialization vulnerability that can lead to RCE via JDBC payloads. EPSS 0.5%Vulnerability CWE-502	CVE Database V5	2025-11-25

Page 1 of 1