ERP vulnerabilities
We track 3 vulnerabilities in ERP products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 18, 2024.
Latest ERP vulnerabilities
- 7.5 High severity
management_software: Improper Control of Generation of Code
An arbitrary file download vulnerability in the component /Basics/DownloadInpFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request.
- 9.8 Critical severity
management_software: Improper Control of Generation of Code
An arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to execute arbitrary code via uploading crafted files.
- 7.5 High severity
management_software: Improper Neutralization of Special Elements used in an OS Command
An arbitrary file download vulnerability in the component /Doc/DownloadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request.