bajie 関連製品全体の CVE とセキュリティ脆弱性情報を集約し、CVSS、EPSS、公開日、脆弱性情報データを掲載しています。
公開された問題は vendor risk cross-site scripting and パス処理の欠陥 に関連することが多く、vendor surface software deployment and vendor surface production workloads の文脈で vendor impact session compromise などの暴露リスクを伴う場合があります。
掲載データは公開脆弱性情報とセキュリティ公告に基づき、過去の暴露面と修補優先度の評価に利用できます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2003-1543 | Cross-site scripting (XSS) vulnerability in Bajie Http Web Server 0.95zxe, 0.95zxc, and possibly others, allows remote attackers to inject arbitrary web script or HTML via the query string, which is reflected in an error message. | [email protected] | 4.3 | 1.99% | 2003-12-31 | 2026-04-16 |
| CVE-2003-1511 | Cross-site scripting (XSS) vulnerability in Bajie Java HTTP Server 0.95 through 0.95zxv4 allows remote attackers to inject arbitrary web script or HTML via (1) the query string to test.txt, (2) the guestName parameter to the custMsg servlet, or (3) the cookiename parameter to the CookieExample servlet. | [email protected] | 4.3 | 3.63% | 2003-12-31 | 2026-04-16 |
| CVE-2001-0308 | UploadServlet in Bajie HTTP JServer 0.78, and possibly other versions before 0.80, allows remote attackers to execute arbitrary commands by calling the servlet to upload a program, then using a ... (modified ..) to access the file that was created for the program. | [email protected] | 7.5 | 3.70% | 2001-05-03 | 2026-04-16 |
| CVE-2001-0307 | Bajie HTTP JServer 0.78, and other versions before 0.80, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request for a CGI program that does not exist. | [email protected] | 7.5 | 7.66% | 2001-05-03 | 2026-04-16 |
| CVE-2000-0774 | The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the web document root. | [email protected] | 5.0 | 1.48% | 2000-10-20 | 2026-04-16 |
| CVE-2000-0773 | Bajie HTTP web server 0.30a allows remote attackers to read arbitrary files via a URL that contains a "....", a variant of the dot dot directory traversal attack. | [email protected] | 5.0 | 1.89% | 2000-10-20 | 2026-04-16 |