com.liferay.portal:release.portal.bom vulnerabilities (Maven)
159 vulnerabilities.
com.liferay.portal:release.portal.bomMavenCross-site scripting in Liferay Portal5.4 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Includes LDAP Credentials in the Page URL5.9 Mediumcom.liferay.portal:release.portal.bomMavenImproper Certificate Validation in Liferay Portal4.8 Mediumcom.liferay.portal:release.portal.bomMavenIncorrect Default Permissions in Liferay Portal4.3 Mediumcom.liferay.portal:release.portal.bomMavenAuthorization Bypass in Liferay Portal4.3 Mediumcom.liferay.portal:release.portal.bomMavenIncorrect Default Permissions in Liferay Portal5.3 Mediumcom.liferay.portal:release.portal.bomMavenIncorrect Default Permissions in Liferay Portal5.3 Mediumcom.liferay.portal:release.portal.bomMavenMissing permissions check in Liferay Portal4.3 Mediumcom.liferay.portal:release.portal.bomMavenPath Traversal in Liferay Portal7.5 Highcom.liferay.portal:release.portal.bomMavenInefficient Regular Expression Complexity in Liferay Portal7.5 Highcom.liferay.portal:release.portal.bomMavenPath Traversal in Liferay Portal7.5 Highcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Vulnerable to SQL Injection via Friendly URL Module9.8 Criticalcom.liferay.portal:release.portal.bomMavenLiferay Portal Insecure Default Configuration in auth.login.prompt.enabled5.3 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP HtmlUtil.escapeRedirect Can Be Circumvented6.1 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal Missing Authorization vulnerability4.3 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP fails to check permissions to view sites/groups4.3 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in edit blog entry page5.4 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal cross-site scripting (XSS) vulnerability in the Frontend Taglib module6.1 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal Layout Module and Liferay DXP Exposes the Cross-Site Request Forgery (CSRF) Token in URLs7.5 Highcom.liferay.portal:release.portal.bomMavenLiferay Portal Journal Module and Liferay DXP Vulnerable to Cross-Site Scripting (XSS)5.4 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal Fragment Module and Liferay DXP Vulnerable to Cross-Site Scripting4.8 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Has Company Administrator Accounts Vulnerable to Takeovers7.2 Highcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS)6.1 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Fails to Properly Check User Permissions4.3 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Fails to Check User Permissions for Workflow Submissions6.3 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Allows Arbitrary Redirect of Users to External URLs6.1 Mediumcom.liferay.portal:release.portal.bomMavenExposure of Resource to Wrong Sphere in Liferay Portal4.3 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in Edit Vocabulary Page5.4 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Stores User Passwords in Cleartext4.9 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Don't Check Permissions of Pages4.3 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP insecure default configuration7.5 Highcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Fails to Check Permissions4.3 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in the Layout Admin Page6.1 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in Asset Publisher App6.1 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via Membership Request Admin Page6.1 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP May Reveal S3 Store's Proxy Password5.9 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Vulnerable to Multiple SQL Injections8.8 Highcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via Asset Module Parameter6.1 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via the Redirect's Admin Page6.1 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Fails to Invalidate CAPTCHA Answers After Use7.5 Highcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Reveals Data via Overly Verbose Error Messages5.3 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal Vulnerable to Cross-Site Scripting (XSS) via Categories Admin Page6.1 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal Vulnerable to Cross-Site Scripting (XSS) via User Name Parameter6.1 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Bypass via Double Encoded URL5.3 Mediumcom.liferay.portal:release.portal.bomMavenOpen Redirect in Liferay Portal7.5 Highcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP have Insecure Deserialization Vulnerability8.1 Highcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Potentially Reveal LDAP Server Password via Unsafe Connection8.3 Highcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Fails to Sanitize API Data6.5 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Vulnerable to Arbitrary Code Execution8.8 Highcom.liferay.portal:release.portal.bomMavenLiferay Portal Vulnerable to Persistent Cross-Site Scripting (XSS) in MyAccountPortlet5.4 Medium- Show moreLoading…