Skip to content
OpenAdvisories

Product · AJA Video Systems

HELO Plus

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-47096

    AJA HELO Plus < 2.1.7 Stored XSS via System Name Parameter

    AJA HELO Plus firmware before 2.1.7 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers with network access to inject malicious JavaScript by setting an unsanitized eParamID_SystemName value through the /config?action=se…

    AJA Video Systems HELO Plus