com.liferay.portal:release.dxp.bom vulnerabilities (Maven)
125 vulnerabilities.
com.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in Edit Vocabulary Page5.4 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Cross-site scripting (XSS) vulnerability in the Frontend JS module6.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Stores User Passwords in Cleartext4.9 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP fails to invalidate password reset tokens after use7.5 Highcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Don't Check Permissions of Pages4.3 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP autosaves form data for other users to see7.5 Highcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP vulnerable to email spam via lack of flagging rate4.3 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay DXP Vulnerable to Cross-Site Scripting (XSS) via the currentURL Parameter6.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Fails to Check Permissions4.3 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in the Layout Admin Page6.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in Asset Publisher App6.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via Membership Request Admin Page6.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP May Reveal S3 Store's Proxy Password5.9 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to Multiple SQL Injections8.8 Highcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via Asset Module Parameter6.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via the Redirect's Admin Page6.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Fails to Invalidate CAPTCHA Answers After Use7.5 Highcom.liferay.portal:release.dxp.bomMavenLiferay DXP Vulnerable to Denial-of-service (DoS) in the Multi-Factor Authentication Module6.5 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Reveals Data via Overly Verbose Error Messages5.3 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Bypass via Double Encoded URL5.3 Mediumcom.liferay.portal:release.dxp.bomMavenUnrestricted Upload of File with Dangerous Type in Liferay Portal and Liferay DXP6.5 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP have Insecure Deserialization Vulnerability8.1 Highcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Potentially Reveal LDAP Server Password via Unsafe Connection8.3 Highcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Fails to Sanitize API Data6.5 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to Arbitrary Code Execution8.8 High