Bajie Java Http Server — known CVE vulnerabilities

Every CVE whose affected-product data names Bajie Java Http Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2001-0307 — CVSS 7.5 (high): Bajie HTTP JServer 0.78, and other versions before 0.80, allows remote attackers to execute arbitrary commands via shell metacharacters in…
• CVE-2001-0308 — CVSS 7.5 (high): UploadServlet in Bajie HTTP JServer 0.78, and possibly other versions before 0.80, allows remote attackers to execute arbitrary commands by…
• CVE-2000-0773 — CVSS 5.0 (medium): Bajie HTTP web server 0.30a allows remote attackers to read arbitrary files via a URL that contains a "....", a variant of the dot dot…
• CVE-2000-0774 — CVSS 5.0 (medium): The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the web document root.
• CVE-2003-1511 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Bajie Java HTTP Server 0.95 through 0.95zxv4 allows remote attackers to inject arbitrary web…
• CVE-2003-1543 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Bajie Http Web Server 0.95zxe, 0.95zxc, and possibly others, allows remote attackers to inject…