Read the docs

Alibaba

Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Alibaba records in CISA KEV

No Alibaba vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Nacos 5 records HIGH Fastjson 2 records HIGH Alibaba 1 record LOW Alipay Activex Control 1 record LOW Druid 1 record LOW Tengine 1 record MEDIUM

Records

5 records in Nacos · all components

TI-2021-10154 CVE-2021-29441 · GHSA-36hp-jr8h-556f

Authentication bypass in Alibaba nacos

Priority HIGH 83

Nacos is a platform designed for dynamic service discovery and configuration and service management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.83236 Published 2021-04-27 Fixed in 1.4.1 CWE-290
TI-2021-10155 CVE-2021-29442 · GHSA-xv5h-v7jh-p2qh

Authentication bypass in Alibaba nacos

Priority HIGH 73

Nacos is a platform designed for dynamic service discovery and configuration and service management.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.64205 Published 2021-04-27 Fixed in 1.4.1 CWE-306
TI-2021-19162 CVE-2021-43116 · GHSA-2g86-r6w2-wqqr

An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter…

Priority MEDIUM 48

An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change the returned package, which lets a malicious user login.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.07464 Published 2022-07-05 No fix listed CWE-287
Open these records in search →