Skip to contentLiferay Dxp vulnerabilities
- liferay dxp, portal, digital experience platform +2 moreLiferay portal unauthorized access to objects via OAuth 2 scopeCVE-2023-33946Fix available2.7 Low
- liferay dxp, portal, digital experience platform +2 moreSQL injection in Liferay PortalCVE-2023-33945Fix available6.4 Medium
- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay PortalCVE-2023-33944Fix available4.8 Medium
- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay PortalCVE-2023-33943Fix available5.4 Medium
- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay PortalCVE-2023-33942Fix available5.4 Medium
- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay PortalCVE-2023-33941Fix available6.1 Medium
- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay PortalCVE-2023-33940Fix available4.8 Medium
- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay PortalCVE-2023-33939Fix available5.4 Medium
- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay PortalCVE-2023-33938Fix available4.8 Medium
- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay PortalCVE-2023-33937Fix available5.4 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to SQL Injection via Friendly URL ModuleCVE-2022-42122Fix available9.8 Critical
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to SQL Injection via the Layout ModuleCVE-2022-42121Fix available8.8 High
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment ModuleCVE-2022-42120Fix available9.8 Critical
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Commerce ModuleCVE-2022-42119Fix available5.4 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Portal Search ModuleCVE-2022-42118Fix available6.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Sharing ModuleCVE-2022-42111Fix available5.4 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Announcements ModuleCVE-2022-42110Fix available6.1 Medium
- liferay dxp, portal +1 moreA Cross-site scripting (XSS) vulnerability in the Document and Media module - file upload...CVE-2022-389015.4 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to XSS in the Frontend Taglib ModuleCVE-2022-42117Fix available6.1 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to XSS in the CKEditor Integration with the Frontend Editor ModuleCVE-2022-42116Fix available6.1 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Role ModuleCVE-2022-42114Fix available5.4 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Document Library ModuleCVE-2022-42113Fix available6.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Portal Search ModuleCVE-2022-42112Fix available5.4 Medium
- liferay dxp, portal +1 moreA Cross-site scripting (XSS) vulnerability in the Blog module - add new topic functionality in...CVE-2022-389025.4 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Fails to Check Permissions in Translation ModuleCVE-2022-38512Fix available6.5 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the filter_ PrefixCVE-2022-28980Fix available6.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP HtmlUtil.escapeRedirect Can Be CircumventedCVE-2022-28977Fix available6.1 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to XSS via Tag NameCVE-2022-28982Fix available6.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to XSS in the Site ModuleCVE-2022-28978Fix available5.4 Medium
- liferay dxp, portal +1 moreLiferay Portal Missing Authorization vulnerabilityCVE-2022-39975Fix available4.3 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to XSS in the Portal Search ModuleCVE-2022-28979Fix available6.1 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP insecure default configurationCVE-2021-33321Fix available7.5 High
- liferay dxp, digital experience platform +1 moreLiferay DXP Vulnerable to Cross-Site Scripting (XSS) via the currentURL ParameterCVE-2021-29049Fix available6.1 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Fails to Check PermissionsCVE-2021-29052Fix available4.3 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in the Layout Admin PageCVE-2021-29048Fix available6.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in Asset Publisher AppCVE-2021-29051Fix available6.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via Membership Request Admin PageCVE-2021-29044Fix available6.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP May Reveal S3 Store's Proxy PasswordCVE-2021-29043Fix available5.9 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to Multiple SQL InjectionsCVE-2021-29053Fix available8.8 High
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via Asset Module ParameterCVE-2021-29046Fix available6.1 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via the Redirect's Admin PageCVE-2021-29045Fix available6.1 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Fails to Invalidate CAPTCHA Answers After UseCVE-2021-29047Fix available7.5 High
- liferay dxpLiferay DXP Vulnerable to Denial-of-service (DoS) in the Multi-Factor Authentication ModuleCVE-2021-29041Fix available6.5 Medium