Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

ERP — Vulnerabilities & Security Advisories 15

All 15 CVE vulnerabilities found in ERP, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities for the ERP product class. It collects recent advisories and historical defects spanning the last twenty-four months, focusing on common weakness types like buffer overflows and authentication flaws. Visitors can use this resource to track vendor-issued security notices, analyze specific weakness categories, and review the complete vulnerability history for the ERP product.

Vendor: Huaxia

CVE ID Title CVSS Severity Published
CVE-2026-78160 Dolibarr ERP User Notes note.php authorization CWE-639 6.3 Medium 2026-08-24
CVE-2026-19350 Dolibarr ERP TakePOS invoice.php fail authorization CWE-862 6.3 Medium 2026-08-09
CVE-2026-4175 Aureus ERP Chatter Message content-text-entry.blade.php cross site scripting CWE-79 3.5 Low 2026-03-15
CVE-2025-14089 Himool ERP AdminActionViewSet update_account improper authorization CWE-285 6.3 Medium 2025-12-05
CVE-2025-2706 Digiwin ERP UploadAjaxAPI.ashx unrestricted upload CWE-434 6.3 Medium 2025-03-24
CVE-2025-2705 Digiwin ERP FileUploadApi.ashx DoWebUpload unrestricted upload CWE-434 7.3 High 2025-03-24
CVE-2025-1646 Lumsoft ERP ASPX File UploadAjaxAPI.ashx unrestricted upload CWE-434 7.3 High 2025-02-25
CVE-2025-1165 Lumsoft ERP FileUploadApi.ashx DoWebUpload unrestricted upload CWE-434 7.3 High 2025-02-11
CVE-2024-7837 SQLi in Firmanet Software's ERP CWE-89 8.2 High 2024-11-22
CVE-2024-0491 Huaxia ERP UserController.java password recovery CWE-640 5.3 Medium 2024-01-13
CVE-2024-0490 Huaxia ERP getAllList information disclosure CWE-200 5.3 Medium 2024-01-13
CVE-2022-3944 jerryhanjj ERP Commodity Management inventory.php uploadImages unrestricted upload CWE-266 6.3 Medium 2022-11-11
CVE-2022-3878 Maxon ERP browse_data sql injection CWE-707 7.3 High 2022-11-07
CVE-2022-3825 Huaxia ERP User Management sql injection CWE-707 6.3 Medium 2022-11-02
CVE-2022-3826 Huaxia ERP Retail Management list information disclosure CWE-266 4.3 Medium 2022-11-02

All 15 known CVE vulnerabilities affecting ERP with full Chinese analysis, references, and POCs where available.