Bajie develops a narrowly scoped Java HTTP server that, despite limited market reach, recurs in vulnerability disclosures centered on web application attack vectors. The recurring exposure focuses on code injection and cross-site scripting weaknesses—classic input-handling flaws endemic to web-facing HTTP servers—and public exploit code has been associated with this vendor's disclosures. Defenders tracking this component should prioritize input validation and output encoding controls; current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Bajie over time
Signals from CVEs in this vendor scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2001-0307HIGH Bajie HTTP JServer 0.78, and other versions before 0.80, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request for a CGI program that do | May 3, 2001 | 7.5 | 33 | NO | YES |
CVE-2001-0308HIGH UploadServlet in Bajie HTTP JServer 0.78, and possibly other versions before 0.80, allows remote attackers to execute arbitrary commands by calling the servlet to upload a program, | May 3, 2001 | 7.5 | 31 | NO | YES |
CVE-2003-1511MEDIUM Cross-site scripting (XSS) vulnerability in Bajie Java HTTP Server 0.95 through 0.95zxv4 allows remote attackers to inject arbitrary web script or HTML via (1) the query string to | Dec 31, 2003 | 4.3 | 22 | NO | YES |
CVE-2000-0773MEDIUM Bajie HTTP web server 0.30a allows remote attackers to read arbitrary files via a URL that contains a "....", a variant of the dot dot directory traversal attack. | Oct 20, 2000 | 5.0 | 15 | NO | NO |
CVE-2000-0774MEDIUM The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the web document root. | Oct 20, 2000 | 5.0 | 15 | NO | NO |
CVE-2003-1543MEDIUM Cross-site scripting (XSS) vulnerability in Bajie Http Web Server 0.95zxe, 0.95zxc, and possibly others, allows remote attackers to inject arbitrary web script or HTML via the quer | Dec 31, 2003 | 4.3 | 14 | NO | NO |
Signals from CVEs in this vendor scope (6 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Bajie.
Media articles that mention a CVE ID that affects a product developed by Bajie — matched by CVE ID, not by vendor name.