Read the docs

AJA Video Systems

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

AJA Video Systems records in CISA KEV

No AJA Video Systems vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-34697 CVE-2026-47097 · GHSA-pp2h-qx3j-9gxh

AJA HELO Plus < 2.1.7 Hardcoded AES Passphrase for Diagnostics Export Bundle

Priority MEDIUM 44

AJA HELO Plus firmware before 2.1.7 contains an information disclosure vulnerability that allows unauthenticated attackers to decrypt sensitive diagnostics bundles by exploiting a static AES passphrase embedded in obfusc…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00382 Published 2026-09-30 Fixed in 2.1.7 CWE-321
TI-2026-34696 CVE-2026-47096 · GHSA-374j-g8f5-7486

AJA HELO Plus < 2.1.7 Stored XSS via System Name Parameter

Priority LOW 24

AJA HELO Plus firmware before 2.1.7 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers with network access to inject malicious JavaScript by setting an unsanitized eParamID_SystemN…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00238 Published 2026-09-30 Fixed in 2.1.7 CWE-79
Open these records in search →