com.liferay.portal:com.liferay.portal.impl vulnerabilities (Maven)
18 vulnerabilities.
com.liferay.portal:com.liferay.portal.implMavenLiferay Portal and DXP use an incorrect cache-control header4.6 Mediumcom.liferay.portal:com.liferay.portal.implMavenLiferay Portal Stores Password Reset Tokens in Plain Text6.9 Mediumcom.liferay.portal:com.liferay.portal.implMavenLiferay Portal ComboServlet denial of service via large file combination6.9 Mediumcom.liferay.portal:com.liferay.portal.implMavenLiferay Portal reflected cross-site scripting (XSS) vulnerability in the google_gaget6.9 Mediumcom.liferay.portal:com.liferay.portal.implMavenLiferay is Vulnerable to Authorization Bypass Through User-Controlled Key5.3 Mediumcom.liferay.portal:com.liferay.portal.implMavenLiferay Portal vulnerable to path traversal and denial-of-service in the ComboServlet6.9 Mediumcom.liferay.portal:com.liferay.portal.implMavenLiferay Portal Cross-Site Request Forgery (CSRF) vulnerability5.1 Mediumcom.liferay.portal:com.liferay.portal.implMavenLiferay Portal has unchecked input for loop condition vulnerability in XML-RPC6.9 Mediumcom.liferay.portal:com.liferay.portal.implMavenLiferay Portal has Improper Validation of Specified Quantity in Input6.9 Mediumcom.liferay.portal:com.liferay.portal.implMavenLiferay Portal has stored cross-site scripting (XSS) vulnerability4.6 Mediumcom.liferay.portal:com.liferay.portal.implMavenLiferay Portal JSONWS API endpoint shares sensitive information5.1 Mediumcom.liferay.portal:com.liferay.portal.implMavenLiferay Portal and Liferay DXP have a reflected cross-site scripting vulnerability6.9 Mediumcom.liferay.portal:com.liferay.portal.implMavenLiferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery in Terms of Use Page8.8 Highcom.liferay.portal:com.liferay.portal.implMavenLiferay Portal Insecure Default Configuration in auth.login.prompt.enabled5.3 Mediumcom.liferay.portal:com.liferay.portal.implMavenLiferay Portal and Liferay DXP fails to check permissions to view sites/groups4.3 Mediumcom.liferay.portal:com.liferay.portal.implMavenLiferay Portal and Liferay DXP fails to invalidate password reset tokens after use7.5 Highcom.liferay.portal:com.liferay.portal.implMavenLiferay Portal and Liferay DXP insecure default configuration7.5 Highcom.liferay.portal:com.liferay.portal.implMavenLiferay Portal and Liferay DXP Bypass via Double Encoded URL5.3 Medium