com.liferay.portal:release.dxp.bom vulnerabilities (Maven)
125 vulnerabilities.
com.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP vulnerable to Stored Cross-site Scripting4.6 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP vulnerable to store Cross-site Scripting4.6 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal 7.4.0 and Liferay DXP have a reflected cross-site scripting (XSS) vulnerability5.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP have a reflected cross-site scripting vulnerability6.9 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP have a Denial Of Service via File Upload (DOS) vulnerability6.9 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery5.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery5.3 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Cross-site Scripting vulnerability4.8 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Reveals Data via Forms5.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS)5.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP have Cross-site Scripting vulnerability in edit Service Access Policy page4.8 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP vulnerable to Cross-site Scripting4.6 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Workflow Component Does Not Check User Permissions9.3 Criticalcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the Content Page Editor8.8 Highcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the Content Page Editor8.8 Highcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to CSRF in the Script Console9.6 Criticalcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the My Account Widget8.8 Highcom.liferay.portal:release.dxp.bomMavenLiferay Portal Document and Media widget and Liferay DXP vulnerable to stored Cross-site Scripting9.0 Criticalcom.liferay.portal:release.dxp.bomMavenLiferay Portal Calendar module and Liferay DXP vulnerable to Cross-site Scripting, content spoofing5.4 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting9.0 Criticalcom.liferay.portal:release.dxp.bomMavenLiferay Portal Language Override edit screen and Liferay DXP vulnerable to reflected Cross-site Scripting9.6 Criticalcom.liferay.portal:release.dxp.bomMavenLiferay Portal Frontend JS module's portlet.js and Liferay DXP vulnerable to Cross-site Scripting9.6 Criticalcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP vulnerable to stored Cross-site Scripting9.0 Criticalcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting9.6 Criticalcom.liferay.portal:release.dxp.bomMavenLiferay Portal's Dynamic Data Mapping module's DDMForm and Liferay DXP vulnerable to stored Cross-site Scripting9.0 Criticalcom.liferay.portal:release.dxp.bomMavenLiferay Portal Message Board widget and Liferay DXP vulnerable to stored Cross-site Scripting9.0 Criticalcom.liferay.portal:release.dxp.bomMavenLiferay Portal Expando module and Liferay DXP vulnerable to stored Cross-site Scripting9.0 Criticalcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP's Users Admin module vulnerable to stored Cross-site Scripting9.0 Criticalcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP vulnerable to Cross-site Scripting9.6 Criticalcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP vulnerable to theft of hashed password6.5 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP User Enumeration Vulnerability5.3 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP HTTP Header Can Expose Versions5.3 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal has a Stored XSS with Blog entries (Insecure defaults)9.0 Criticalcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Two Forward Slashes6.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Replacement Character6.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal defaults to a low work factor for the default password hashing algorithm8.1 Highcom.liferay.portal:release.dxp.bomMavenLiferay Portal has an XXE vulnerability in Java2WsddTask._format8.0 Highcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Allows Templates to be Viewed via the UI or API5.3 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Allows Authenticated Users with View Permissions to Edit Permissions6.5 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Information Disclosure Vulnerability in the Control Panel4.3 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Does Not Properly Restrict Membership to Child Site Based on Parent Site Options5.4 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to Open Redirect in Countries Management's Edit Region Page6.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery in Terms of Use Page8.8 Highcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Does Not Obfuscate Password Reminder Answers6.3 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal vulnerable to user impersonation5.4 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal allows attackers to discover the existence of sites5.3 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal denial-of-service vulnerability4.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal's account lockout does not invalidate existing user sessions5.4 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal stored cross-site scripting (XSS) vulnerability9.6 Criticalcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to XSS in the Commerce Module9.6 Critical- Show moreLoading…