Computer Software Manufaktur Alibaba — known CVE vulnerabilities

Every CVE whose affected-product data names Computer Software Manufaktur Alibaba, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-1999-0776 — CVSS 5.0 (medium): Alibaba HTTP server allows remote attackers to read files via a .. (dot dot) attack.
• CVE-1999-1444 — CVSS 5.0 (medium): genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, which results in transactions that are sent in cleartext.
• CVE-2000-0626 — CVSS 5.0 (medium): Buffer overflow in Alibaba web server allows remote attackers to cause a denial of service via a long GET request.
• CVE-1999-0885 — CVSS 3.6 (low): Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL.