Skip to contentLiferay Portal vulnerabilities
- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay PortalCVE-2023-33942Fix available5.4 Medium
- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay PortalCVE-2023-33941Fix available6.1 Medium
- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay PortalCVE-2023-33940Fix available4.8 Medium
- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay PortalCVE-2023-33939Fix available5.4 Medium
- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay PortalCVE-2023-33938Fix available4.8 Medium
- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay PortalCVE-2023-33937Fix available5.4 Medium
- liferay portalLiferay Portal 6.2.5 allows Command=FileUpload&Type=File&CurrentFolder=/ requests when frmfolders...CVE-2021-33990Public exploitDisputedEPSS 11.9%9.8 Critical
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP Includes LDAP Credentials in the Page URLCVE-2022-42132Fix available5.9 Medium
- liferay portal, digital experience platform +1 moreImproper Certificate Validation in Liferay PortalCVE-2022-42131Fix available4.8 Medium
- liferay portal, digital experience platform +1 moreIncorrect Default Permissions in Liferay PortalCVE-2022-42130Fix available4.3 Medium
- liferay portal, digital experience platform +1 moreAuthorization Bypass in Liferay PortalCVE-2022-42129Fix available4.3 Medium
- liferay portal, digital experience platform +1 moreIncorrect Default Permissions in Liferay PortalCVE-2022-42128Fix available5.3 Medium
- liferay portal, digital experience platform +1 moreIncorrect Default Permissions in Liferay PortalCVE-2022-42127Fix available5.3 Medium
- liferay portal, digital experience platform +1 moreMissing permissions check in Liferay PortalCVE-2022-42126Fix available4.3 Medium
- liferay portal, digital experience platform +1 morePath Traversal in Liferay PortalCVE-2022-42125Fix available7.5 High
- liferay portal, digital experience platform +1 moreInefficient Regular Expression Complexity in Liferay PortalCVE-2022-42124Fix available7.5 High
- liferay portal, digital experience platform +1 morePath Traversal in Liferay PortalCVE-2022-42123Fix available7.5 High
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to SQL Injection via Friendly URL ModuleCVE-2022-42122Fix available9.8 Critical
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to SQL Injection via the Layout ModuleCVE-2022-42121Fix available8.8 High
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment ModuleCVE-2022-42120Fix available9.8 Critical
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Commerce ModuleCVE-2022-42119Fix available5.4 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Portal Search ModuleCVE-2022-42118Fix available6.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Sharing ModuleCVE-2022-42111Fix available5.4 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Announcements ModuleCVE-2022-42110Fix available6.1 Medium
- liferay dxp, portal +1 moreA Cross-site scripting (XSS) vulnerability in the Document and Media module - file upload...CVE-2022-389015.4 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to XSS in the Frontend Taglib ModuleCVE-2022-42117Fix available6.1 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to XSS in the CKEditor Integration with the Frontend Editor ModuleCVE-2022-42116Fix available6.1 Medium
- liferay portalLiferay Portal Vulnerable to XSS in the Object ModuleCVE-2022-42115Fix available5.4 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Role ModuleCVE-2022-42114Fix available5.4 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Document Library ModuleCVE-2022-42113Fix available6.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Portal Search ModuleCVE-2022-42112Fix available5.4 Medium
- liferay dxp, portal +1 moreA Cross-site scripting (XSS) vulnerability in the Blog module - add new topic functionality in...CVE-2022-389025.4 Medium
- liferay portalLiferay Portal Insecure Default Configuration in auth.login.prompt.enabledCVE-2022-41414Fix available5.3 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Fails to Check Permissions in Translation ModuleCVE-2022-38512Fix available6.5 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the filter_ PrefixCVE-2022-28980Fix available6.1 Medium
- liferay portalLiferay Portal Path Traversal Vulnerability via the Hypermedia REST APIs ModuleCVE-2022-28981Fix available7.5 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP HtmlUtil.escapeRedirect Can Be CircumventedCVE-2022-28977Fix available6.1 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to XSS via Tag NameCVE-2022-28982Fix available6.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to XSS in the Site ModuleCVE-2022-28978Fix available5.4 Medium
- liferay dxp, portal +1 moreLiferay Portal Missing Authorization vulnerabilityCVE-2022-39975Fix available4.3 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to XSS in the Portal Search ModuleCVE-2022-28979Fix available6.1 Medium
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP allows arbitrary injection via web content template namesCVE-2022-26596Fix available6.1 Medium
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP allows arbitrary injection via the site nameCVE-2022-26597Fix available6.1 Medium
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP fails to check permissions to view sites/groupsCVE-2022-26595Fix available4.3 Medium
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP allows arbitrary injection via the name of an asset categoryCVE-2022-26593Fix available5.4 Medium
- liferay portalLiferay Portal and Liferay DXP allows arbitrary injection via form fieldCVE-2022-26594Fix available6.1 Medium
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP fails to check origin of event messagesCVE-2022-25146Fix available5.3 Medium
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in the Gogo Shell moduleCVE-2021-38269Fix available5.4 Medium
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in edit blog entry pageCVE-2021-38267Fix available5.4 Medium
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP cross-site scripting (XSS) vulnerability via the script consoleCVE-2021-38263Fix available6.1 Medium
- Show moreLoading…