com.liferay.portal:release.portal.bom vulnerabilities (Maven)
159 vulnerabilities.
com.liferay.portal:release.portal.bomMavenLiferay Portal Vulnerable to Reflected XSS via the selectedLanguageId Parameter5.1 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal is vulnerable to XSS in the Blogs widget4.8 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal is vulnerable to DNS rebinding attacks5.1 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal vulnerable to password enumeration6.3 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal Vulnerable to CSRF in Headless APIs7.0 Highcom.liferay.portal:release.portal.bomMavenLiferay Portal Does Not Limit Access to APIs Before Email Verification6.9 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal Vulnerable to DoS via Crafted Headless API Request7.1 Highcom.liferay.portal:release.portal.bomMavenLiferay Portal Stores Password Reset Tokens in Plain Text6.9 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal is vulnerable to Stored XSS through Forms text type field5.1 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal has multiple Stored XSS vulnerabilities on its View Order page4.8 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal is vulnerable to XSS through its Commerce Search Result widget4.8 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Profile Widget does not prevent vCard extension spoofing4.8 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal Vulnerable to XSS in Web Content translation4.8 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal vulnerable to reflected cross-site scripting via the `redirect` parameter4.8 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal vulnerable to path traversal and denial-of-service in the ComboServlet6.9 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal vulnerable to cross-site scripting in the web content template4.8 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal vulnerable to cross-site scripting in the Calendar widget4.8 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal Uses Default Password6.9 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP vulnerable to Stored Cross-site Scripting4.6 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP vulnerable to store Cross-site Scripting4.6 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal Reflected Cross-Site Scripting Vulnerability via PortalUtil.escapeRedirect5.3 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal's Unlimited File Upload Could Result in DoS5.3 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal Username Enumeration Vulnerability6.9 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal Reflected Cross-Site Scripting Vulnerability via snippet Parameter6.9 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal Vulnerable to Cross-Site Scripting via DDMPortlet_definition Parameter4.8 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal Vulnerable to Cross-Site Scripting in Dynamic Data Mapping5.1 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal Vulnerable to Cross-Site Request Forgery7.1 Highcom.liferay.portal:release.portal.bomMavenLiferay Portal Unauthenticated File Access via URL5.3 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal Vulnerable to Cross-Site Scripting via assetTagNames Parameter5.1 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal Vulnerable to Cross-Site Scripting via DDM Structure Field Labels5.1 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal Enumeration Discrepancy in Calendars5.3 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal CSRF Vulnerability via Endpoint Parameter6.9 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal has Stored Cross-Site Scripting Vulnerability via Message Boards Feature4.6 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal Vulnerable to Cross-Site Scripting6.9 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal Login Bypass Vulnerability2.0 Lowcom.liferay.portal:release.portal.bomMavenLiferay Portal 7.4.0 and Liferay DXP have a reflected cross-site scripting (XSS) vulnerability5.1 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP have a reflected cross-site scripting vulnerability6.9 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP have a Denial Of Service via File Upload (DOS) vulnerability6.9 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery5.1 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery5.3 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Cross-site Scripting vulnerability4.8 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Reveals Data via Forms5.1 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS)5.1 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP have Cross-site Scripting vulnerability in edit Service Access Policy page4.8 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP vulnerable to Cross-site Scripting4.6 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Workflow Component Does Not Check User Permissions9.3 Criticalcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the Content Page Editor8.8 Highcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the Content Page Editor8.8 Highcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Vulnerable to CSRF in the Script Console9.6 Criticalcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the My Account Widget8.8 High- Show moreLoading…