Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: AJA Video Systems HELO Plus — aja.com/security-advisories/aja-sa-2026-003 Clear all filters
TI-2026-34696 CVE-2026-47096 · GHSA-374j-g8f5-7486

AJA HELO Plus < 2.1.7 Stored XSS via System Name Parameter

Priority LOW 24

AJA HELO Plus firmware before 2.1.7 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers with network access to inject malicious JavaScript by setting an unsanitized eParamID_SystemN…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00238 Published 2026-09-30 Fixed in 2.1.7 CWE-79
TI-2026-34697 CVE-2026-47097 · GHSA-pp2h-qx3j-9gxh

AJA HELO Plus < 2.1.7 Hardcoded AES Passphrase for Diagnostics Export Bundle

Priority MEDIUM 44

AJA HELO Plus firmware before 2.1.7 contains an information disclosure vulnerability that allows unauthenticated attackers to decrypt sensitive diagnostics bundles by exploiting a static AES passphrase embedded in obfusc…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00382 Published 2026-09-30 Fixed in 2.1.7 CWE-321