Vendor

    Alibaba

    14 known vulnerabilities in products by Alibaba, 0 of them actively exploited (CISA KEV).

    Key figures

    14

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    5

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Alibaba
    CriticalCVE-2017-18349

    Alibaba Fastjson: Code Execution

    also in 1 other product

    		9.8
    CriticalCVE-2021-29441

    Authentication bypass

    		8.6
    HighCVE-2021-29442

    Authentication bypass

    		8.6
    CriticalCVE-2022-25845

    Deserialization of Untrusted Data

    also in 1 other product

    		8.1
    HighCVE-2021-43116

    Alibaba Nacos: security vulnerability

    		8.8
    CriticalCVE-2026-16723

    Remote Code Execution in fastjson 1.2.68–1.2.83

    		9.0
    CriticalCVE-2025-70974

    Alibaba Fastjson: Inclusion of Functionality from Untrusted Control Sphere

    		10.0
    HighCVE-2021-33800

    Druid: Path Traversal

    		7.5
    MediumCVE-2020-19676

    Alibaba Nacos: Improper Access Control

    		5.3
    Not ratedCVE-2007-0827

    Alibaba Alipay Activex Control: Code Execution

    		—
    HighCVE-2020-21699

    Alibaba Tengine: Integer Overflow

    		7.5
    MediumCVE-2026-9680

    MCP Server Exposure via Insecure Default Binding on alibabacloud-rds-openapi-mcp-server

    		5.8
    MediumCVE-2021-44667

    Alibaba Nacos: Cross-Site Scripting (XSS)

    		6.1
    Not ratedCVE-2014-5976

    AliBaba alibaba (aka com.alibaba.wireless) for Android: Information Disclosure

    		—

    News

    Products

    Products by Alibaba
    Nacos50
    Alibaba Fastjson40