What’s Vulnerable › Products

anji-plus AJ-Report vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your anji-plus AJ-Report version is affected

Latest anji-plus AJ-Report vulnerabilities

• CVE-2026-120209 — AJ-Report through 1.7.1 Authentication Bypass leading to RCE via Share-Token (CVSS 9.8)
• CVE-2024-5356 — anji-plus AJ-Report testTransform;swagger-ui sql injection (CVSS 9.8)
• CVE-2024-5355 — anji-plus AJ-Report IGroovyHandler command injection (CVSS 9.8)
• CVE-2024-5354 — anji-plus AJ-Report detailByCode information disclosure (CVSS 6.5)
• CVE-2024-5353 — anji-plus AJ-Report ZIP File decompress path traversal (CVSS 9.8)
• CVE-2024-5352 — anji-plus AJ-Report validationRules deserialization (CVSS 9.8)
• CVE-2024-5351 — anji-plus AJ-Report Javascript getValueFromJs deserialization (CVSS 9.8)
• CVE-2024-5350 — anji-plus AJ-Report pageList sql injection (CVSS 9.8)
• CVE-2022-46973 — (CVSS 9.8)
• CVE-2022-42983 — (CVSS 8.8)