Skip to content
OpenAdvisories

Vendor

AJA Video Systems

2 known vulnerabilities.

Products

HELO Plus 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-47096

    AJA HELO Plus < 2.1.7 Stored XSS via System Name Parameter

    AJA HELO Plus firmware before 2.1.7 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers with network access to inject malicious JavaScript by setting an unsanitized eParamID_SystemName value through the /config?action=se…

    AJA Video Systems HELO Plus