com.liferay.portal:release.dxp.bom vulnerabilities (Maven)
125 vulnerabilities.
com.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to XSS in the Wiki Widget9.0 Criticalcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to XSS via the OAuth2ProviderApplicationRedirect Class9.6 Criticalcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to XSS via the Page Tree Menu9.0 Criticalcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to XSS in the Fragment Components9.0 Criticalcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to Stored XSS in the Manage Vocabulary Page9.0 Criticalcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to Reflected XSS via the Export for Translation Page9.6 Criticalcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Organization Selector Does Not Check User Permissions4.3 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to CSRF via the Layout Module8.8 Highcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to Open Redirect via the Layout Module6.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to XSS via the Layout Module6.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Includes LDAP Credentials in the Page URL5.9 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to SQL Injection via Friendly URL Module9.8 Criticalcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to SQL Injection via the Layout Module8.8 Highcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment Module9.8 Criticalcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to XSS via the Commerce Module5.4 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to XSS via the Portal Search Module6.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to XSS via the Sharing Module5.4 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to XSS via the Announcements Module6.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to XSS in the Frontend Taglib Module6.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to XSS in the CKEditor Integration with the Frontend Editor Module6.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to XSS via the Role Module5.4 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to XSS via the Document Library Module6.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to XSS via the Portal Search Module5.4 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Fails to Check Permissions in Translation Module6.5 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to XSS via the filter_ Prefix6.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP HtmlUtil.escapeRedirect Can Be Circumvented6.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to XSS in the Site Module5.4 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to XSS in the Portal Search Module6.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP allows arbitrary injection via web content template names6.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP allows arbitrary injection via the site name6.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP fails to check permissions to view sites/groups4.3 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP allows arbitrary injection via the name of an asset category5.4 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP allows arbitrary injection via form field6.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP fails to check origin of event messages5.3 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in the Gogo Shell module5.4 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in edit blog entry page5.4 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP cross-site scripting (XSS) vulnerability via the script console6.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS)5.4 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP fails to properly import users from LDAP7.5 Highcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP has incorrect default permissions for site members6.5 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Cross-site scripting (XSS) vulnerability in the Document Library module6.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal Layout Module and Liferay DXP Exposes the Cross-Site Request Forgery (CSRF) Token in URLs7.5 Highcom.liferay.portal:release.dxp.bomMavenLiferay Portal Journal Module and Liferay DXP Vulnerable to Cross-Site Scripting (XSS)5.4 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal Fragment Module and Liferay DXP Vulnerable to Cross-Site Scripting4.8 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Has Company Administrator Accounts Vulnerable to Takeovers7.2 Highcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS)6.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Fails to Properly Check User Permissions4.3 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Fails to Check User Permissions for Workflow Submissions6.3 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP Allows Arbitrary Redirect of Users to External URLs6.1 Mediumcom.liferay.portal:release.dxp.bomMavenLiferay Portal and Liferay DXP does not properly check user permission4.3 Medium- Show moreLoading…