Skip to contentLiferay vulnerabilities
Newest
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Organization Selector Does Not Check User PermissionsCVE-2023-3426Fix available4.3 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to CSRF via the Layout ModuleCVE-2023-35030Fix available8.8 High
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to Open Redirect via the Layout ModuleCVE-2023-35029Fix available6.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Layout ModuleCVE-2023-3193Fix available6.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal has Inefficient Regular ExpressionCVE-2023-33950Fix available6.5 Medium
- liferay dxp, portal, digital experience platform +2 moreInsecure Default Initialization In Liferay PortalCVE-2023-33949Fix available5.3 Medium
- liferay dxp, portal, digital experience platform +2 moreMissing authorization in Liferay portalCVE-2023-33948Fix available5.3 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay portal has unauthorized access to object definition via searchCVE-2023-33947Fix available2.7 Low
- liferay dxp, portal, digital experience platform +2 moreLiferay portal unauthorized access to objects via OAuth 2 scopeCVE-2023-33946Fix available2.7 Low
- liferay dxp, portal, digital experience platform +2 moreSQL injection in Liferay PortalCVE-2023-33945Fix available6.4 Medium
- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay PortalCVE-2023-33944Fix available4.8 Medium
- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay PortalCVE-2023-33943Fix available5.4 Medium
- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay PortalCVE-2023-33942Fix available5.4 Medium
- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay PortalCVE-2023-33941Fix available6.1 Medium
- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay PortalCVE-2023-33940Fix available4.8 Medium
- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay PortalCVE-2023-33939Fix available5.4 Medium
- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay PortalCVE-2023-33938Fix available4.8 Medium
- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay PortalCVE-2023-33937Fix available5.4 Medium
- liferay portalLiferay Portal 6.2.5 allows Command=FileUpload&Type=File&CurrentFolder=/ requests when frmfolders...CVE-2021-33990Public exploitDisputedEPSS 11.9%9.8 Critical
- geni portal, geni-portal +1 moreGENI Portal sliceresource.php no_invocation_id_error cross site scriptingCVE-2020-366543.5 Low
- geni portal, geni-portal +1 moreGENI Portal error-text.php cross site scriptingCVE-2020-366533.5 Low
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP Includes LDAP Credentials in the Page URLCVE-2022-42132Fix available5.9 Medium
- liferay portal, digital experience platform +1 moreImproper Certificate Validation in Liferay PortalCVE-2022-42131Fix available4.8 Medium
- liferay portal, digital experience platform +1 moreIncorrect Default Permissions in Liferay PortalCVE-2022-42130Fix available4.3 Medium
- liferay portal, digital experience platform +1 moreAuthorization Bypass in Liferay PortalCVE-2022-42129Fix available4.3 Medium
- liferay portal, digital experience platform +1 moreIncorrect Default Permissions in Liferay PortalCVE-2022-42128Fix available5.3 Medium
- liferay portal, digital experience platform +1 moreIncorrect Default Permissions in Liferay PortalCVE-2022-42127Fix available5.3 Medium
- liferay portal, digital experience platform +1 moreMissing permissions check in Liferay PortalCVE-2022-42126Fix available4.3 Medium
- liferay portal, digital experience platform +1 morePath Traversal in Liferay PortalCVE-2022-42125Fix available7.5 High
- liferay portal, digital experience platform +1 moreInefficient Regular Expression Complexity in Liferay PortalCVE-2022-42124Fix available7.5 High
- liferay portal, digital experience platform +1 morePath Traversal in Liferay PortalCVE-2022-42123Fix available7.5 High
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to SQL Injection via Friendly URL ModuleCVE-2022-42122Fix available9.8 Critical
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to SQL Injection via the Layout ModuleCVE-2022-42121Fix available8.8 High
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment ModuleCVE-2022-42120Fix available9.8 Critical
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Commerce ModuleCVE-2022-42119Fix available5.4 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Portal Search ModuleCVE-2022-42118Fix available6.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Sharing ModuleCVE-2022-42111Fix available5.4 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Announcements ModuleCVE-2022-42110Fix available6.1 Medium
- liferay dxp, portal +1 moreA Cross-site scripting (XSS) vulnerability in the Document and Media module - file upload...CVE-2022-389015.4 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to XSS in the Frontend Taglib ModuleCVE-2022-42117Fix available6.1 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to XSS in the CKEditor Integration with the Frontend Editor ModuleCVE-2022-42116Fix available6.1 Medium
- liferay portalLiferay Portal Vulnerable to XSS in the Object ModuleCVE-2022-42115Fix available5.4 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Role ModuleCVE-2022-42114Fix available5.4 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Document Library ModuleCVE-2022-42113Fix available6.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Portal Search ModuleCVE-2022-42112Fix available5.4 Medium
- liferay dxp, portal +1 moreA Cross-site scripting (XSS) vulnerability in the Blog module - add new topic functionality in...CVE-2022-389025.4 Medium
- liferay portalLiferay Portal Insecure Default Configuration in auth.login.prompt.enabledCVE-2022-41414Fix available5.3 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Fails to Check Permissions in Translation ModuleCVE-2022-38512Fix available6.5 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the filter_ PrefixCVE-2022-28980Fix available6.1 Medium
- liferay portalLiferay Portal Path Traversal Vulnerability via the Hypermedia REST APIs ModuleCVE-2022-28981Fix available7.5 High
- Show moreLoading…