com.liferay.portal:release.portal.bom vulnerabilities (Maven)
159 vulnerabilities.
com.liferay.portal:release.portal.bomMavenLiferay Portal Document and Media widget and Liferay DXP vulnerable to stored Cross-site Scripting9.0 Criticalcom.liferay.portal:release.portal.bomMavenLiferay Portal Calendar module and Liferay DXP vulnerable to Cross-site Scripting, content spoofing5.4 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting9.0 Criticalcom.liferay.portal:release.portal.bomMavenLiferay Portal Language Override edit screen and Liferay DXP vulnerable to reflected Cross-site Scripting9.6 Criticalcom.liferay.portal:release.portal.bomMavenLiferay Portal Frontend JS module's portlet.js and Liferay DXP vulnerable to Cross-site Scripting9.6 Criticalcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP vulnerable to stored Cross-site Scripting9.0 Criticalcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting9.6 Criticalcom.liferay.portal:release.portal.bomMavenLiferay Portal's Dynamic Data Mapping module's DDMForm and Liferay DXP vulnerable to stored Cross-site Scripting9.0 Criticalcom.liferay.portal:release.portal.bomMavenLiferay Portal Message Board widget and Liferay DXP vulnerable to stored Cross-site Scripting9.0 Criticalcom.liferay.portal:release.portal.bomMavenLiferay Portal Expando module and Liferay DXP vulnerable to stored Cross-site Scripting9.0 Criticalcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP's Users Admin module vulnerable to stored Cross-site Scripting9.0 Criticalcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP vulnerable to Cross-site Scripting9.6 Criticalcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP vulnerable to theft of hashed password6.5 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP User Enumeration Vulnerability5.3 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP HTTP Header Can Expose Versions5.3 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal vulnerable to Denial of Service5.0 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal has a Stored XSS with Blog entries (Insecure defaults)9.0 Criticalcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Two Forward Slashes6.1 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Replacement Character6.1 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal defaults to a low work factor for the default password hashing algorithm8.1 Highcom.liferay.portal:release.portal.bomMavenLiferay Portal has an XXE vulnerability in Java2WsddTask._format8.0 Highcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Allows Templates to be Viewed via the UI or API5.3 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Allows Authenticated Users with View Permissions to Edit Permissions6.5 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Information Disclosure Vulnerability in the Control Panel4.3 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Does Not Properly Restrict Membership to Child Site Based on Parent Site Options5.4 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Vulnerable to Open Redirect in Countries Management's Edit Region Page6.1 Mediumcom.liferay.portal:release.portal.bomMavenPrivilege escalation in Liferay Portal6.3 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal vulnerable to user impersonation5.4 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal allows attackers to discover the existence of sites5.3 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal denial-of-service vulnerability4.1 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal's account lockout does not invalidate existing user sessions5.4 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal stored cross-site scripting (XSS) vulnerability9.6 Criticalcom.liferay.portal:release.portal.bomMavenLiferay Portal denial of service (memory consumption)6.5 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal XSS with `p_l_back_url_title` on edit content page9.6 Criticalcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Vulnerable to CSRF via the Layout Module8.8 Highcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Vulnerable to Open Redirect via the Layout Module6.1 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal and Liferay DXP Vulnerable to XSS via the Layout Module6.1 Mediumcom.liferay.portal:release.portal.bomMavenLiferay Portal has Inefficient Regular Expression6.5 Mediumcom.liferay.portal:release.portal.bomMavenInsecure Default Initialization In Liferay Portal5.3 Mediumcom.liferay.portal:release.portal.bomMavenMissing authorization in Liferay portal5.3 Mediumcom.liferay.portal:release.portal.bomMavenLiferay portal has unauthorized access to object definition via search2.7 Lowcom.liferay.portal:release.portal.bomMavenLiferay portal unauthorized access to objects via OAuth 2 scope2.7 Lowcom.liferay.portal:release.portal.bomMavenSQL injection in Liferay Portal6.4 Mediumcom.liferay.portal:release.portal.bomMavenCross-site scripting in Liferay Portal4.8 Mediumcom.liferay.portal:release.portal.bomMavenCross-site scripting in Liferay Portal5.4 Mediumcom.liferay.portal:release.portal.bomMavenCross-site scripting in Liferay Portal5.4 Mediumcom.liferay.portal:release.portal.bomMavenCross-site scripting in Liferay Portal6.1 Mediumcom.liferay.portal:release.portal.bomMavenCross-site scripting in Liferay Portal4.8 Mediumcom.liferay.portal:release.portal.bomMavenCross-site scripting in Liferay Portal5.4 Mediumcom.liferay.portal:release.portal.bomMavenCross-site scripting in Liferay Portal4.8 Medium- Show moreLoading…