Login Request a demo
NA
Product
Nacos
by Alibaba · last CVE Jul 5, 2022
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 2Medium 2Low 0
Severity
All severities5Critical1High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Nacos to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-29441
9.8
83%
Apr 27
Nacos is a platform designed for dynamic service discovery and configuration and service management
Affected: before 1.4.1
CVE-2021-43116
8.8
7%
Jul 5
An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change the returned…
Affected: through 2.0.3
CVE-2021-29442
7.5
66%
Apr 27
Nacos is a platform designed for dynamic service discovery and configuration and service management
Affected: before 1.4.1
CVE-2021-44667
6.1
1%
Mar 11
A Cross Site Scripting (XSS) vulnerability exists in Nacos 2.0.3 in auth/users via the (1) pageSize and (2) pageNo parameters
Affected: 2.0.3
CVE-2020-19676
5.3
1%
Sep 30
Nacos 1.1.4 is affected by: Incorrect Access Control
Affected: 1.1.4
Showing 5