Security Advisory

CVE-2025-55366

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-08-21 00:00:00

Last updated 2026-07-05 01:09:43

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Incorrect access control in the component \controller\UserController.java of jshERP v3.5 allows attackers to arbitrarily reset user account passwords and execute a horizontal privilege escalation attack.

← Browse all CVEs View on cve.org ↗