Skip to contentLiferay Portal vulnerabilities
- liferay portalAn issue was discovered in Liferay Portal CE 7.1.2 GA3. An attacker can use Liferay's Groovy...CVE-2019-11444Public exploitDisputedEPSS 12.6%7.2 High
- liferay portal** DISPUTED ** Liferay 6.2.x and before has an FCKeditor configuration that allows an attacker to...CVE-2018-10795Disputed8.8 High
- liferay portalLiferay Portal XSS vulnerability via movie parameter in the /html/portal/flash.jsp pageCVE-2017-1000425Fix available6.1 Medium
- liferay portalIn Liferay Portal 6.1.0, the tags section has XSS via a Public Render Parameter (p_r_p) value, as...CVE-2017-178686.1 Medium
- liferay portalLiferay Portal Vulnerable to XSS via Mishandled Title or Summary in the Web Content DisplayCVE-2017-12649Fix available6.1 Medium
- liferay portalLiferay Portal XSS VulnerabilityCVE-2017-12648Fix available6.1 Medium
- liferay portalLiferay Portal Vulnerable to XSS via a Knowledge Base Article TitleCVE-2017-12647Fix available6.1 Medium
- liferay portalLiferay Portal XSS VulnerabilityCVE-2017-12646Fix available6.1 Medium
- liferay portalLiferay Portal Vulnerable to XSS via an Invalid portletIdCVE-2017-12645Fix available6.1 Medium
- liferay portalLiferay Portal Vulnerable to XSS via a Crafted Redirect FieldCVE-2016-10404Fix available6.1 Medium
- liferay portalShell command injection in Liferay PortalCVE-2010-5327Fix available8.8 High
- liferay portalLiferay Portal Vulnerable to XSS in Profile Search FunctionalityCVE-2016-3670Public exploitFix available6.1 Medium
- liferay portalCross-site scripting (XSS) vulnerability in Liferay Portal Enterprise Edition (EE) 6.2 SP8 and...CVE-2014-83493.5 Low
- liferay portalMultiple cross-site scripting (XSS) vulnerabilities in group/control_panel/manage in Liferay...CVE-2014-29634.3 Medium
- liferay portalLiferay Portal vulnerable to arbitrary command injectionCVE-2011-1571Public exploitFix available6.8 Medium
- liferay portalCross-site scripting (XSS) vulnerability in Liferay Portal Community Edition (CE) 6.x before 6.0...CVE-2011-15703.5 Low
- liferay portalThe XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA,...CVE-2011-15033.5 Low
- liferay portalLiferay Portal Community Edition (CE) 6.x before 6.0.6 GA, when Apache Tomcat is used, allows...CVE-2011-15024.0 Medium
- liferay portalCross-site scripting (XSS) vulnerability in Liferay Portal before 5.3.0 allows remote attackers...CVE-2009-37424.3 Medium
- liferay portal enterpriseCross-site scripting (XSS) vulnerability in downloads/portal_ent in Liferay Portal Enterprise 3.6...CVE-2005-4400Public exploit4.3 Medium