com.liferay.portal:release.dxp.bom (Maven)
Advisories
316
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 2025.Q2.10 or later clears every advisory below that has a fix.
Upgrade commands
maven
<dependency><groupId>com.liferay.portal</groupId><artifactId>release.dxp.bom</artifactId><version>2025.Q2.10</version></dependency>gradle
implementation("com.liferay.portal:release.dxp.bom:2025.Q2.10")Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-66x6-8jgv-qpfh Liferay Portal and Liferay DXP vulnerable to Stored Cross-site Scripting |
Medium EPSS 0.22% |
>= 2024.Q1.1, < 2024.Q1.13 | 2024.Q1.13 |
| GHSA-66x6-8jgv-qpfh Liferay Portal and Liferay DXP vulnerable to Stored Cross-site Scripting |
Medium EPSS 0.22% |
>= 2024.Q2.0, < 2024.Q3.0 | 2024.Q3.0 |
| GHSA-66x6-8jgv-qpfh Liferay Portal and Liferay DXP vulnerable to Stored Cross-site Scripting |
Medium EPSS 0.22% |
>= 7.4.13.u14, <= 7.4.13.u92 | No fix yet |
| GHSA-rcc7-jx7p-hrv4 Liferay Portal and Liferay DXP vulnerable to store Cross-site Scripting |
Medium EPSS 0.21% |
>= 2024.Q1.1, < 2024.Q1.20 | 2024.Q1.20 |
| GHSA-rcc7-jx7p-hrv4 Liferay Portal and Liferay DXP vulnerable to store Cross-site Scripting |
Medium EPSS 0.21% |
>= 2025.Q2.0, < 2025.Q2.10 | 2025.Q2.10 |
| GHSA-rcc7-jx7p-hrv4 Liferay Portal and Liferay DXP vulnerable to store Cross-site Scripting |
Medium EPSS 0.21% |
>= 7.4, <= 7.4.13.u92 | No fix yet |
| GHSA-rcc7-jx7p-hrv4 Liferay Portal and Liferay DXP vulnerable to store Cross-site Scripting |
Medium EPSS 0.21% |
>= 2024.Q2.0, <= 2024.Q2.13 | No fix yet |
| GHSA-rcc7-jx7p-hrv4 Liferay Portal and Liferay DXP vulnerable to store Cross-site Scripting |
Medium EPSS 0.21% |
>= 2025.Q1.0, < 2025.Q1.17 | 2025.Q1.17 |
| GHSA-rcc7-jx7p-hrv4 Liferay Portal and Liferay DXP vulnerable to store Cross-site Scripting |
Medium EPSS 0.21% |
>= 2024.Q3.0, <= 2024.Q3.13 | No fix yet |
| GHSA-rcc7-jx7p-hrv4 Liferay Portal and Liferay DXP vulnerable to store Cross-site Scripting |
Medium EPSS 0.21% |
>= 2024.Q4.0, <= 2024.Q4.7 | No fix yet |
| GHSA-m5c7-5gv3-hcpf Liferay Portal 7.4.0 and Liferay DXP have a reflected cross-site scripting (XSS) vulnerability |
Medium EPSS 0.22% |
>= 2024.q2.0, <= 2024.q2.13 | No fix yet |
| GHSA-m5c7-5gv3-hcpf Liferay Portal 7.4.0 and Liferay DXP have a reflected cross-site scripting (XSS) vulnerability |
Medium EPSS 0.22% |
<= 7.4.13.u92 | No fix yet |
| GHSA-m5c7-5gv3-hcpf Liferay Portal 7.4.0 and Liferay DXP have a reflected cross-site scripting (XSS) vulnerability |
Medium EPSS 0.22% |
>= 2025.q1.0, < 2025.q1.11 | 2025.q1.11 |
| GHSA-m5c7-5gv3-hcpf Liferay Portal 7.4.0 and Liferay DXP have a reflected cross-site scripting (XSS) vulnerability |
Medium EPSS 0.22% |
>= 2024.q1.0, < 2024.q1.17 | 2024.q1.17 |
| GHSA-m5c7-5gv3-hcpf Liferay Portal 7.4.0 and Liferay DXP have a reflected cross-site scripting (XSS) vulnerability |
Medium EPSS 0.22% |
>= 2024.q3.0, <= 2024.q3.13 | No fix yet |
| GHSA-m5c7-5gv3-hcpf Liferay Portal 7.4.0 and Liferay DXP have a reflected cross-site scripting (XSS) vulnerability |
Medium EPSS 0.22% |
>= 2024.q4.0, <= 2024.q4.7 | No fix yet |
| GHSA-222w-xmc5-jhp3 Liferay Portal and Liferay DXP have a reflected cross-site scripting vulnerability |
Medium EPSS 0.22% |
<= 7.4.13.u92 | No fix yet |
| GHSA-222w-xmc5-jhp3 Liferay Portal and Liferay DXP have a reflected cross-site scripting vulnerability |
Medium EPSS 0.22% |
>= 2024.q4.0, <= 2024.q4.7 | No fix yet |
| GHSA-222w-xmc5-jhp3 Liferay Portal and Liferay DXP have a reflected cross-site scripting vulnerability |
Medium EPSS 0.22% |
>= 2024.q1.0, < 2024.q1.13 | 2024.q1.13 |
| GHSA-222w-xmc5-jhp3 Liferay Portal and Liferay DXP have a reflected cross-site scripting vulnerability |
Medium EPSS 0.22% |
>= 2024.q2.0, <= 2024.q2.13 | No fix yet |
| GHSA-222w-xmc5-jhp3 Liferay Portal and Liferay DXP have a reflected cross-site scripting vulnerability |
Medium EPSS 0.22% |
>= 2024.q3.0, <= 2024.q3.13 | No fix yet |
| GHSA-cg99-m88x-422c Liferay Portal and Liferay DXP have a Denial Of Service via File Upload (DOS) vulnerability |
Medium EPSS 0.29% |
<= 7.4.13.u92 | No fix yet |
| GHSA-cg99-m88x-422c Liferay Portal and Liferay DXP have a Denial Of Service via File Upload (DOS) vulnerability |
Medium EPSS 0.29% |
>= 2024.Q1.0, < 2024.Q1.17 | 2024.Q1.17 |
| GHSA-cg99-m88x-422c Liferay Portal and Liferay DXP have a Denial Of Service via File Upload (DOS) vulnerability |
Medium EPSS 0.29% |
>= 2024.Q2.0, <= 2024.Q2.13 | No fix yet |
| GHSA-cg99-m88x-422c Liferay Portal and Liferay DXP have a Denial Of Service via File Upload (DOS) vulnerability |
Medium EPSS 0.29% |
>= 2024.Q3.0, <= 2024.Q3.13 | No fix yet |
| GHSA-cg99-m88x-422c Liferay Portal and Liferay DXP have a Denial Of Service via File Upload (DOS) vulnerability |
Medium EPSS 0.29% |
>= 2024.Q4.0, <= 2024.Q4.7 | No fix yet |
| GHSA-cg99-m88x-422c Liferay Portal and Liferay DXP have a Denial Of Service via File Upload (DOS) vulnerability |
Medium EPSS 0.29% |
>= 2025.Q1.0, < 2025.Q1.9 | 2025.Q1.9 |
| GHSA-c6g5-g6r7-q4j6 Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery |
Medium EPSS 0.25% |
>= 2024.Q3.1, <= 2024.Q3.13 | No fix yet |
| GHSA-c6g5-g6r7-q4j6 Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery |
Medium EPSS 0.25% |
>= 2024.Q4.0, <= 2024.Q4.7 | No fix yet |
| GHSA-c6g5-g6r7-q4j6 Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery |
Medium EPSS 0.25% |
>= 2025.Q1.0, < 2025.Q1.6 | 2025.Q1.6 |
| GHSA-c6g5-g6r7-q4j6 Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery |
Medium EPSS 0.25% |
<= 7.4.13.u92 | No fix yet |
| GHSA-c6g5-g6r7-q4j6 Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery |
Medium EPSS 0.25% |
>= 2024.Q1.0, < 2024.Q1.16 | 2024.Q1.16 |
| GHSA-c6g5-g6r7-q4j6 Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery |
Medium EPSS 0.25% |
>= 2024.Q2.0, <= 2024.Q2.13 | No fix yet |
| GHSA-6v93-frf9-2rp8 Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery |
High EPSS 0.47% |
<= 7.4.13.u92 | No fix yet |
| GHSA-6v93-frf9-2rp8 Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery |
High EPSS 0.47% |
>= 2024.Q4.0, <= 2024.Q4.7 | No fix yet |
| GHSA-6v93-frf9-2rp8 Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery |
High EPSS 0.47% |
>= 2024.Q3.1, <= 2024.Q3.13 | No fix yet |
| GHSA-6v93-frf9-2rp8 Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery |
High EPSS 0.47% |
>= 2024.Q2.0, <= 2024.Q2.13 | No fix yet |
| GHSA-6v93-frf9-2rp8 Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery |
High EPSS 0.47% |
>= 2024.Q1.0, < 2024.Q1.16 | 2024.Q1.16 |
| GHSA-6v93-frf9-2rp8 Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery |
High EPSS 0.47% |
>= 2025.Q1.0, < 2025.Q1.5 | 2025.Q1.5 |
| GHSA-qhp6-vp7c-g7xp Liferay Cross-site Scripting vulnerability |
Medium EPSS 0.27% |
>= 7.3.10.ep1, <= 7.3.10.u36 | No fix yet |
| GHSA-qhp6-vp7c-g7xp Liferay Cross-site Scripting vulnerability |
Medium EPSS 0.27% |
No fix yet | |
| GHSA-qhp6-vp7c-g7xp Liferay Cross-site Scripting vulnerability |
Medium EPSS 0.27% |
>= 7.3.10.0, <= 7.3.10.3 | No fix yet |
| GHSA-qhp6-vp7c-g7xp Liferay Cross-site Scripting vulnerability |
Medium EPSS 0.27% |
>= 7.2.10, <= 7.2.10.8 | No fix yet |
| GHSA-qhp6-vp7c-g7xp Liferay Cross-site Scripting vulnerability |
Medium EPSS 0.27% |
>= 2024.Q4.1, < 2025.Q1.0 | 2025.Q1.0 |
| GHSA-qhp6-vp7c-g7xp Liferay Cross-site Scripting vulnerability |
Medium EPSS 0.27% |
>= 2024.Q3.1, < 2024.Q3.10 | 2024.Q3.10 |
| GHSA-qhp6-vp7c-g7xp Liferay Cross-site Scripting vulnerability |
Medium EPSS 0.27% |
>= 2024.Q2.0, <= 2024.Q2.13 | No fix yet |
| GHSA-qhp6-vp7c-g7xp Liferay Cross-site Scripting vulnerability |
Medium EPSS 0.27% |
>= 2024.Q1.1, < 2024.Q1.13 | 2024.Q1.13 |
| GHSA-qhp6-vp7c-g7xp Liferay Cross-site Scripting vulnerability |
Medium EPSS 0.27% |
>= 2023.Q4.0, <= 2023.Q4.10 | No fix yet |
| GHSA-qhp6-vp7c-g7xp Liferay Cross-site Scripting vulnerability |
Medium EPSS 0.27% |
>= 2023.Q3.1, <= 2023.Q3.10 | No fix yet |
| GHSA-qhp6-vp7c-g7xp Liferay Cross-site Scripting vulnerability |
Medium EPSS 0.27% |
>= 7.4.13.u1, <= 7.4.13.u92 | No fix yet |
| GHSA-qhp6-vp7c-g7xp Liferay Cross-site Scripting vulnerability |
Medium EPSS 0.27% |
>= 7.2.10.fp1, <= 7.2.10.fp20 | No fix yet |
| GHSA-9fcg-wrp8-qhr4 Liferay Portal and Liferay DXP Reveals Data via Forms |
Medium EPSS 0.27% |
>= 2024.Q3.0, < 2024.Q3.1 | 2024.Q3.1 |
| GHSA-9fcg-wrp8-qhr4 Liferay Portal and Liferay DXP Reveals Data via Forms |
Medium EPSS 0.27% |
>= 2023.Q3.1, <= 2023.Q3.10 | No fix yet |
| GHSA-9fcg-wrp8-qhr4 Liferay Portal and Liferay DXP Reveals Data via Forms |
Medium EPSS 0.27% |
>= 2024.Q2.0, <= 2024.Q2.12 | No fix yet |
| GHSA-9fcg-wrp8-qhr4 Liferay Portal and Liferay DXP Reveals Data via Forms |
Medium EPSS 0.27% |
>= 2023.Q4.0, <= 2023.Q4.10 | No fix yet |
| GHSA-9fcg-wrp8-qhr4 Liferay Portal and Liferay DXP Reveals Data via Forms |
Medium EPSS 0.27% |
>= 2024.Q1.1, < 2024.Q1.13 | 2024.Q1.13 |
| GHSA-hrc4-p2h3-pjqw Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) |
Medium EPSS 0.29% |
>= 2024.Q1.1, < 2024.Q1.13 | 2024.Q1.13 |
| GHSA-hrc4-p2h3-pjqw Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) |
Medium EPSS 0.29% |
>= 2023.Q3.1, < 2024.Q4.0 | 2024.Q4.0 |
| GHSA-hrc4-p2h3-pjqw Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) |
Medium EPSS 0.29% |
>= 2023.Q4.0, < 2024.Q4.0 | 2024.Q4.0 |
| GHSA-hrc4-p2h3-pjqw Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) |
Medium EPSS 0.29% |
>= 2024.Q2.0, <= 2024.Q2.11 | No fix yet |
| GHSA-hrc4-p2h3-pjqw Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) |
Medium EPSS 0.29% |
>= 2024.Q3.0, < 2024.Q3.1 | 2024.Q3.1 |
| GHSA-px38-239g-x5mg Liferay Portal and Liferay DXP have Cross-site Scripting vulnerability in edit Service Access Policy page |
Medium EPSS 0.28% |
>= 7.4, < 7.4.13.u88 | 7.4.13.u88 |
| GHSA-px38-239g-x5mg Liferay Portal and Liferay DXP have Cross-site Scripting vulnerability in edit Service Access Policy page |
Medium EPSS 0.28% |
>= 7.0, < 7.3.10.u30 | 7.3.10.u30 |
| GHSA-4hxr-28mv-q729 Liferay Portal and Liferay DXP vulnerable to Cross-site Scripting |
Medium EPSS 0.34% |
>= 7.1, < 7.4.13.u39 | 7.4.13.u39 |
| GHSA-chj2-4vg7-hhg3 Liferay Portal and Liferay DXP Vulnerable to CSRF in the Script Console |
Medium EPSS 0.24% |
>= 7.2.0.GA, <= 7.2.10.fp20 | No fix yet |
| GHSA-chj2-4vg7-hhg3 Liferay Portal and Liferay DXP Vulnerable to CSRF in the Script Console |
Medium EPSS 0.24% |
>= 2023.Q3.1, < 2023.Q3.5 | 2023.Q3.5 |
| GHSA-chj2-4vg7-hhg3 Liferay Portal and Liferay DXP Vulnerable to CSRF in the Script Console |
Medium EPSS 0.24% |
>= 7.4.0-GA, <= 7.4.13.u92 | No fix yet |
| GHSA-chj2-4vg7-hhg3 Liferay Portal and Liferay DXP Vulnerable to CSRF in the Script Console |
Medium EPSS 0.24% |
>= 7.0.0-GA, <= 7.0.10.fp102 | No fix yet |
| GHSA-chj2-4vg7-hhg3 Liferay Portal and Liferay DXP Vulnerable to CSRF in the Script Console |
Medium EPSS 0.24% |
>= 7.1.0-GA, <= 7.1.10.fp28 | No fix yet |
| GHSA-chj2-4vg7-hhg3 Liferay Portal and Liferay DXP Vulnerable to CSRF in the Script Console |
Medium EPSS 0.24% |
>= 7.3.0-GA, < 7.3.10.u36 | 7.3.10.u36 |
| GHSA-3mfq-fp2f-vwqh Liferay Portal and Liferay DXP Workflow Component Does Not Check User Permissions |
High EPSS 0.65% |
>= 2023.Q3.1, < 2023.Q3.9 | 2023.Q3.9 |
| GHSA-3mfq-fp2f-vwqh Liferay Portal and Liferay DXP Workflow Component Does Not Check User Permissions |
High EPSS 0.65% |
>= 7.4-ga, < 7.4.13.u92 | 7.4.13.u92 |
| GHSA-3mfq-fp2f-vwqh Liferay Portal and Liferay DXP Workflow Component Does Not Check User Permissions |
High EPSS 0.65% |
>= 7.3-ga, < 7.3.10.u36 | 7.3.10.u36 |
| GHSA-3mfq-fp2f-vwqh Liferay Portal and Liferay DXP Workflow Component Does Not Check User Permissions |
High EPSS 0.65% |
>= 2023.Q4.0, < 2023.Q4.6 | 2023.Q4.6 |
| GHSA-hmrx-6pr5-hpwj Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the Content Page Editor |
High EPSS 0.38% |
>= 2023.Q3.1, < 2023.Q3.6 | 2023.Q3.6 |
| GHSA-hmrx-6pr5-hpwj Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the Content Page Editor |
High EPSS 0.38% |
>= 7.4.GA, < 7.4u93 | 7.4u93 |
| GHSA-hmrx-6pr5-hpwj Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the Content Page Editor |
High EPSS 0.38% |
>= 7.3u29, < 7.3u36 | 7.3u36 |
| GHSA-hmrx-6pr5-hpwj Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the Content Page Editor |
High EPSS 0.38% |
>= 2023.Q4.0, < 2023.Q4.3 | 2023.Q4.3 |
| GHSA-p63m-vmjr-wg37 Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the Content Page Editor |
High EPSS 0.38% |
>= 2023.Q4.0, < 2023.Q4.3 | 2023.Q4.3 |
| GHSA-p63m-vmjr-wg37 Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the Content Page Editor |
High EPSS 0.38% |
>= 7.3.GA, < 7.3u36 | 7.3u36 |
| GHSA-p63m-vmjr-wg37 Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the Content Page Editor |
High EPSS 0.38% |
>= 7.4.GA, < 7.4u93 | 7.4u93 |
| GHSA-p63m-vmjr-wg37 Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the Content Page Editor |
High EPSS 0.38% |
>= 2023.Q3.1, < 2023.Q3.6 | 2023.Q3.6 |
| GHSA-6c4v-x9v2-rjm8 Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the My Account Widget |
High EPSS 0.38% |
>= 7.3u32, < 7.3u37 | 7.3u37 |
| GHSA-6c4v-x9v2-rjm8 Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the My Account Widget |
High EPSS 0.38% |
>= 7.4u75, < 7.4u93 | 7.4u93 |
| GHSA-6c4v-x9v2-rjm8 Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the My Account Widget |
High EPSS 0.38% |
>= 2023.Q4.0, < 2023.Q4.3 | 2023.Q4.3 |
| GHSA-6c4v-x9v2-rjm8 Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the My Account Widget |
High EPSS 0.38% |
>= 2023.Q3.1, < 2023.Q3.6 | 2023.Q3.6 |
| GHSA-q2cv-7j58-rfmj Liferay Portal Document and Media widget and Liferay DXP vulnerable to stored Cross-site Scripting |
Medium EPSS 0.61% |
>= 7.4.13.u18, <= 7.4.13.u92 | No fix yet |
| GHSA-q2cv-7j58-rfmj Liferay Portal Document and Media widget and Liferay DXP vulnerable to stored Cross-site Scripting |
Medium EPSS 0.61% |
>= 2023.Q3, < 2023.Q3.6 | 2023.Q3.6 |
| GHSA-hgr6-6hhw-883f Liferay Portal Calendar module and Liferay DXP vulnerable to Cross-site Scripting, content spoofing |
Medium EPSS 0.47% |
>= 7.3.0, < 7.3.10.u4 | 7.3.10.u4 |
| GHSA-hgr6-6hhw-883f Liferay Portal Calendar module and Liferay DXP vulnerable to Cross-site Scripting, content spoofing |
Medium EPSS 0.47% |
>= 7.2.0, < 7.2.10.fp15 | 7.2.10.fp15 |
| GHSA-rwhv-hvj2-qrqm Liferay Portal Frontend JS module's portlet.js and Liferay DXP vulnerable to Cross-site Scripting |
Medium EPSS 0.56% |
>= 7.4.13.u1, < 7.4.13.u38 | 7.4.13.u38 |
| GHSA-rwhv-hvj2-qrqm Liferay Portal Frontend JS module's portlet.js and Liferay DXP vulnerable to Cross-site Scripting |
Medium EPSS 0.56% |
>= 7.3.10.ep3, < 7.3.10.u11 | 7.3.10.u11 |
| GHSA-rwhv-hvj2-qrqm Liferay Portal Frontend JS module's portlet.js and Liferay DXP vulnerable to Cross-site Scripting |
Medium EPSS 0.56% |
>= 7.2.0, < 7.2.10.fp20 | 7.2.10.fp20 |
| GHSA-rwxc-4cmw-7x75 Liferay Portal and Liferay DXP vulnerable to stored Cross-site Scripting |
Medium EPSS 0.56% |
>= 7.2.0, < 7.2.10.fp17 | 7.2.10.fp17 |
| GHSA-rwxc-4cmw-7x75 Liferay Portal and Liferay DXP vulnerable to stored Cross-site Scripting |
Medium EPSS 0.56% |
>= 7.3.10.ep3, < 7.3.10.u4 | 7.3.10.u4 |
| GHSA-rwxc-4cmw-7x75 Liferay Portal and Liferay DXP vulnerable to stored Cross-site Scripting |
Medium EPSS 0.56% |
>= 7.4.13.u1, < 7.4.13.u10 | 7.4.13.u10 |
| GHSA-44jg-jgjx-3xg5 Liferay Portal's Dynamic Data Mapping module's DDMForm and Liferay DXP vulnerable to stored Cross-site Scripting |
Medium EPSS 0.56% |
>= 7.4.13.u1, <= 7.4.13.u102 | No fix yet |
| GHSA-44jg-jgjx-3xg5 Liferay Portal's Dynamic Data Mapping module's DDMForm and Liferay DXP vulnerable to stored Cross-site Scripting |
Medium EPSS 0.56% |
>= 7.2.0, < 7.2.10.fp17 | 7.2.10.fp17 |
| GHSA-44jg-jgjx-3xg5 Liferay Portal's Dynamic Data Mapping module's DDMForm and Liferay DXP vulnerable to stored Cross-site Scripting |
Medium EPSS 0.56% |
>= 7.3.10.ep3, < 7.3.10.u4 | 7.3.10.u4 |
| GHSA-73x3-8mrg-5r93 Liferay Portal Language Override edit screen and Liferay DXP vulnerable to reflected Cross-site Scripting |
Medium EPSS 0.61% |
>= 2023.Q3, < 2023.Q3.5 | 2023.Q3.5 |
| GHSA-73x3-8mrg-5r93 Liferay Portal Language Override edit screen and Liferay DXP vulnerable to reflected Cross-site Scripting |
Medium EPSS 0.61% |
>= 7.4.13.u4, <= 7.4.13.u92 | No fix yet |
| GHSA-54pv-r62j-9qqc Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting |
Medium EPSS 0.61% |
>= 7.3.10.ep3, < 7.3.10.u34 | 7.3.10.u34 |
| GHSA-54pv-r62j-9qqc Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting |
Medium EPSS 0.61% |
>= 7.4.10.ep1, <= 7.4.13.u92 | No fix yet |
| GHSA-54pv-r62j-9qqc Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting |
Medium EPSS 0.61% |
>= 2023.Q3, < 2023.Q3.6 | 2023.Q3.6 |
| GHSA-468x-frcm-ghx6 Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting |
Medium EPSS 0.62% |
>= 2023.Q3, < 2023.Q3.6 | 2023.Q3.6 |
| GHSA-468x-frcm-ghx6 Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting |
Medium EPSS 0.62% |
>= 7.4.13.u44, <= 7.4.13.u92 | No fix yet |
| GHSA-v2xq-m22w-jmpr Liferay Portal and Liferay DXP's Users Admin module vulnerable to stored Cross-site Scripting |
Medium EPSS 0.61% |
>= 7.3.0, < 7.3.10.u4 | 7.3.10.u4 |
| GHSA-v2xq-m22w-jmpr Liferay Portal and Liferay DXP's Users Admin module vulnerable to stored Cross-site Scripting |
Medium EPSS 0.61% |
>= 7.2.0, < 7.2.10.fp17 | 7.2.10.fp17 |
| GHSA-cr36-3vqf-x5w5 Liferay Portal Expando module and Liferay DXP vulnerable to stored Cross-site Scripting |
Medium EPSS 0.56% |
>= 7.3.0, < 7.3.10.u4 | 7.3.10.u4 |
| GHSA-cr36-3vqf-x5w5 Liferay Portal Expando module and Liferay DXP vulnerable to stored Cross-site Scripting |
Medium EPSS 0.56% |
>= 7.2.0, < 7.2.10.fp17 | 7.2.10.fp17 |
| GHSA-p28x-4r5h-ph6j Liferay Portal Message Board widget and Liferay DXP vulnerable to stored Cross-site Scripting |
Medium EPSS 0.56% |
>= 7.2.0, < 7.2.10.fp17 | 7.2.10.fp17 |
| GHSA-p28x-4r5h-ph6j Liferay Portal Message Board widget and Liferay DXP vulnerable to stored Cross-site Scripting |
Medium EPSS 0.56% |
>= 7.3.0, < 7.3.10.u4 | 7.3.10.u4 |
| GHSA-xpjg-7hx7-wgcx Liferay Portal and Liferay DXP vulnerable to Cross-site Scripting |
Medium EPSS 0.56% |
>= 7.3.0, < 7.3.10.u4 | 7.3.10.u4 |
| GHSA-xpjg-7hx7-wgcx Liferay Portal and Liferay DXP vulnerable to Cross-site Scripting |
Medium EPSS 0.56% |
>= 7.2.0, < 7.2.10.fp15 | 7.2.10.fp15 |
| GHSA-mh9r-9pcx-rx55 Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery in Terms of Use Page |
High EPSS 0.28% |
>= 7.2.0, < 7.2.10.fp11 | 7.2.10.fp11 |
| GHSA-mwhf-6mjm-6w3h Liferay Portal and Liferay DXP Does Not Obfuscate Password Reminder Answers |
Medium EPSS 0.28% |
>= 7.3.0, < 7.3.10.fp1 | 7.3.10.fp1 |
| GHSA-mwhf-6mjm-6w3h Liferay Portal and Liferay DXP Does Not Obfuscate Password Reminder Answers |
Medium EPSS 0.28% |
< 7.2.10.fp17 | 7.2.10.fp17 |
| GHSA-xq4r-4xfh-vch8 Liferay Portal and Liferay DXP vulnerable to theft of hashed password |
Medium EPSS 0.44% |
>= 2023.Q3, < 2023.Q3.5 | 2023.Q3.5 |
| GHSA-xq4r-4xfh-vch8 Liferay Portal and Liferay DXP vulnerable to theft of hashed password |
Medium EPSS 0.44% |
>= 7.4.0, <= 7.4.13.u92 | No fix yet |
| GHSA-qm43-g2xj-hvg5 Liferay Portal and Liferay DXP User Enumeration Vulnerability |
Medium EPSS 0.53% |
>= 7.4.0, < 7.4.13.u27 | 7.4.13.u27 |
| GHSA-qm43-g2xj-hvg5 Liferay Portal and Liferay DXP User Enumeration Vulnerability |
Medium EPSS 0.53% |
< 7.2.10.fp20 | 7.2.10.fp20 |
| GHSA-qm43-g2xj-hvg5 Liferay Portal and Liferay DXP User Enumeration Vulnerability |
Medium EPSS 0.53% |
>= 7.3.0, < 7.3.10.u8 | 7.3.10.u8 |
| GHSA-2mvj-q2q3-wxjv Liferay Portal and Liferay DXP HTTP Header Can Expose Versions |
Medium EPSS 0.53% |
>= 7.4.0, < 7.4.13.u26 | 7.4.13.u26 |
| GHSA-2mvj-q2q3-wxjv Liferay Portal and Liferay DXP HTTP Header Can Expose Versions |
Medium EPSS 0.53% |
< 7.2.10.fp19 | 7.2.10.fp19 |
| GHSA-2mvj-q2q3-wxjv Liferay Portal and Liferay DXP HTTP Header Can Expose Versions |
Medium EPSS 0.53% |
>= 7.3.0, < 7.3.10.u5 | 7.3.10.u5 |
| GHSA-vvpf-53qx-cxhh Liferay Portal has a Stored XSS with Blog entries (Insecure defaults) |
Medium EPSS 0.52% |
>= 7.3.0, < 7.3.10.u4 | 7.3.10.u4 |
| GHSA-vvpf-53qx-cxhh Liferay Portal has a Stored XSS with Blog entries (Insecure defaults) |
Medium EPSS 0.52% |
>= 7.4.0, < 7.4.13.u9 | 7.4.13.u9 |
| GHSA-vvpf-53qx-cxhh Liferay Portal has a Stored XSS with Blog entries (Insecure defaults) |
Medium EPSS 0.52% |
< 7.2.10.fp19 | 7.2.10.fp19 |
| GHSA-3qq5-wcrx-4h8r Liferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Two Forward Slashes |
Medium EPSS 0.36% |
>= 7.2.10.fp15, <= 7.2.10.fp18 | No fix yet |
| GHSA-3qq5-wcrx-4h8r Liferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Two Forward Slashes |
Medium EPSS 0.36% |
>= 7.4.0, < 7.4.13.u9 | 7.4.13.u9 |
| GHSA-548x-j6x6-hcv4 Liferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Replacement Character |
Medium EPSS 0.97% |
< 7.2.10.fp19 | 7.2.10.fp19 |
| GHSA-548x-j6x6-hcv4 Liferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Replacement Character |
Medium EPSS 0.97% |
>= 7.4.0, < 7.4.13.u19 | 7.4.13.u19 |
| GHSA-548x-j6x6-hcv4 Liferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Replacement Character |
Medium EPSS 0.97% |
>= 7.3.0, < 7.3.10.u4 | 7.3.10.u4 |
| GHSA-43h9-p3j4-39hm Liferay Portal defaults to a low work factor for the default password hashing algorithm |
High EPSS 0.33% |
>= 7.4.0, < 7.4.13.u16 | 7.4.13.u16 |
| GHSA-43h9-p3j4-39hm Liferay Portal defaults to a low work factor for the default password hashing algorithm |
High EPSS 0.33% |
>= 7.3.0, < 7.3.10.u4 | 7.3.10.u4 |
| GHSA-43h9-p3j4-39hm Liferay Portal defaults to a low work factor for the default password hashing algorithm |
High EPSS 0.33% |
< 7.2.10.fp17 | 7.2.10.fp17 |
| GHSA-869h-qhfx-w939 Liferay Portal has an XXE vulnerability in Java2WsddTask._format |
High EPSS 0.50% |
>= 7.3.0, < 7.3.10.u12 | 7.3.10.u12 |
| GHSA-869h-qhfx-w939 Liferay Portal has an XXE vulnerability in Java2WsddTask._format |
High EPSS 0.50% |
>= 7.4.0, < 7.4.13.u4 | 7.4.13.u4 |
| GHSA-869h-qhfx-w939 Liferay Portal has an XXE vulnerability in Java2WsddTask._format |
High EPSS 0.50% |
< 7.2.10.fp20 | 7.2.10.fp20 |
| GHSA-mf8h-grfg-j9j3 Liferay Portal and Liferay DXP Allows Templates to be Viewed via the UI or API |
Medium EPSS 0.48% |
< 7.2.10.fp17 | 7.2.10.fp17 |
| GHSA-pw7p-3648-qqmg Liferay Portal and Liferay DXP Allows Authenticated Users with View Permissions to Edit Permissions |
Medium EPSS 0.41% |
< 7.2.10.fp17 | 7.2.10.fp17 |
| GHSA-pw7p-3648-qqmg Liferay Portal and Liferay DXP Allows Authenticated Users with View Permissions to Edit Permissions |
Medium EPSS 0.41% |
No fix yet | |
| GHSA-4585-28v2-8h46 Liferay Portal and Liferay DXP Information Disclosure Vulnerability in the Control Panel |
Medium EPSS 0.44% |
< 7.2.10.fp19 | 7.2.10.fp19 |
| GHSA-4585-28v2-8h46 Liferay Portal and Liferay DXP Information Disclosure Vulnerability in the Control Panel |
Medium EPSS 0.44% |
>= 7.3.0, < 7.3.10.u4 | 7.3.10.u4 |
| GHSA-qpgh-6v9w-vfv6 Liferay Portal and Liferay DXP Does Not Properly Restrict Membership to Child Site Based on Parent Site Options |
Medium EPSS 0.33% |
< 7.2.10.fp15 | 7.2.10.fp15 |
| GHSA-f3rf-cr7f-cwc4 Liferay Portal and Liferay DXP Vulnerable to Open Redirect in Countries Management's Edit Region Page |
Medium EPSS 0.39% |
>= 7.4.13.u45, <= 7.4.13.u92 | No fix yet |
| GHSA-f3rf-cr7f-cwc4 Liferay Portal and Liferay DXP Vulnerable to Open Redirect in Countries Management's Edit Region Page |
Medium EPSS 0.39% |
>= 2023.Q3, < 2023.Q3.6 | 2023.Q3.6 |
| GHSA-qwj8-qgpr-8crm Liferay Portal vulnerable to user impersonation |
High EPSS 0.55% |
>= 7.3.0, < 7.3.10.u4 | 7.3.10.u4 |
| GHSA-qwj8-qgpr-8crm Liferay Portal vulnerable to user impersonation |
High EPSS 0.55% |
>= 7.2.0, < 7.2.10.fp15 | 7.2.10.fp15 |
| GHSA-mqf8-4cqm-p83x Liferay Portal allows attackers to discover the existence of sites |
Medium EPSS 0.59% |
>= 7.3.0, < 7.3.10.u4 | 7.3.10.u4 |
| GHSA-mqf8-4cqm-p83x Liferay Portal allows attackers to discover the existence of sites |
Medium EPSS 0.59% |
>= 7.2.0, < 7.2.10.fp18 | 7.2.10.fp18 |
| GHSA-w275-m8cr-hf2v Liferay Portal denial-of-service vulnerability |
Medium EPSS 0.57% |
>= 7.2.0, < 7.2.10.fp19 | 7.2.10.fp19 |
| GHSA-w275-m8cr-hf2v Liferay Portal denial-of-service vulnerability |
Medium EPSS 0.57% |
>= 7.4.0, < 7.4.13.u27 | 7.4.13.u27 |
| GHSA-w275-m8cr-hf2v Liferay Portal denial-of-service vulnerability |
Medium EPSS 0.57% |
>= 7.3.0, < 7.3.10.u6 | 7.3.10.u6 |
| GHSA-2mx7-xvfg-fg53 Liferay Portal's account lockout does not invalidate existing user sessions |
Medium EPSS 0.31% |
>= 7.2.0, < 7.2.10.fp5 | 7.2.10.fp5 |
| GHSA-9vgq-w5pv-v77q Liferay Portal stored cross-site scripting (XSS) vulnerability |
Medium EPSS 0.56% |
>= 7.4.0, < 7.4.3.13u8 | 7.4.3.13u8 |
| GHSA-9vgq-w5pv-v77q Liferay Portal stored cross-site scripting (XSS) vulnerability |
Medium EPSS 0.56% |
< 7.2.10.fp17 | 7.2.10.fp17 |
| GHSA-9vgq-w5pv-v77q Liferay Portal stored cross-site scripting (XSS) vulnerability |
Medium EPSS 0.56% |
>= 7.3.0, < 7.3.10.u4 | 7.3.10.u4 |
| GHSA-qp68-5v39-r869 Liferay Portal and Liferay DXP Vulnerable to XSS in the Commerce Module |
Medium EPSS 2.79% |
>= 7.4.0, <= 7.4.13.u92 | No fix yet |
| GHSA-qp68-5v39-r869 Liferay Portal and Liferay DXP Vulnerable to XSS in the Commerce Module |
Medium EPSS 2.79% |
>= 7.3.0, <= 7.3.10.u33 | No fix yet |
| GHSA-hv45-r2f5-fmhj Liferay Portal and Liferay DXP Vulnerable to XSS in the Wiki Widget |
Medium EPSS 2.78% |
>= 7.2.0, <= 7.2.10.fp20 | No fix yet |
| GHSA-hv45-r2f5-fmhj Liferay Portal and Liferay DXP Vulnerable to XSS in the Wiki Widget |
Medium EPSS 2.78% |
>= 7.1.0, <= 7.1.10.fp28 | No fix yet |
| GHSA-hv45-r2f5-fmhj Liferay Portal and Liferay DXP Vulnerable to XSS in the Wiki Widget |
Medium EPSS 2.78% |
>= 7.4.0, < 7.4.13.u88 | 7.4.13.u88 |
| GHSA-hv45-r2f5-fmhj Liferay Portal and Liferay DXP Vulnerable to XSS in the Wiki Widget |
Medium EPSS 2.78% |
>= 7.0.10.fp83, <= 7.0.10.fp102 | No fix yet |
| GHSA-hv45-r2f5-fmhj Liferay Portal and Liferay DXP Vulnerable to XSS in the Wiki Widget |
Medium EPSS 2.78% |
>= 7.3.0, < 7.3.10.u34 | 7.3.10.u34 |
| GHSA-49gm-5685-8fxv Liferay Portal and Liferay DXP Vulnerable to XSS via the OAuth2ProviderApplicationRedirect Class |
Medium EPSS 0.57% |
>= 7.4.13.u41, < 7.4.13.u90 | 7.4.13.u90 |
| GHSA-j5gv-w838-mmcx Liferay Portal and Liferay DXP Vulnerable to XSS via the Page Tree Menu |
Medium EPSS 0.57% |
>= 7.4.0, < 7.4.13.u79 | 7.4.13.u79 |
| GHSA-j5gv-w838-mmcx Liferay Portal and Liferay DXP Vulnerable to XSS via the Page Tree Menu |
Medium EPSS 0.57% |
>= 7.3.10.fp1, <= 7.3.10.fp23 | No fix yet |
| GHSA-j663-6jpj-xx8c Liferay Portal and Liferay DXP Vulnerable to XSS in the Fragment Components |
Medium EPSS 0.57% |
>= 7.4.0, < 7.4.13.u54 | 7.4.13.u54 |
| GHSA-g44j-f8wm-6622 Liferay Portal and Liferay DXP Vulnerable to Stored XSS in the Manage Vocabulary Page |
Medium EPSS 2.78% |
>= 7.4.0, < 7.4.13.u88 | 7.4.13.u88 |
| GHSA-w2g3-j73q-7qv7 Liferay Portal and Liferay DXP Vulnerable to Reflected XSS via the Export for Translation Page |
Medium EPSS 0.57% |
>= 7.4.0, < 7.4.13.u86 | 7.4.13.u86 |
| GHSA-xph3-vjcq-g488 Liferay Portal and Liferay DXP Organization Selector Does Not Check User Permissions |
Medium EPSS 0.58% |
>= 7.4.143.u81, <= 7.4.143.u85 | No fix yet |
| GHSA-p2fc-xxr8-fw3p Liferay Portal and Liferay DXP Vulnerable to CSRF via the Layout Module |
High EPSS 0.40% |
>= 7.4.13.u70, <= 7.4.13.u76 | No fix yet |
| GHSA-qxf6-mp24-52cv Liferay Portal and Liferay DXP Vulnerable to XSS via the Layout Module |
Medium EPSS 0.45% |
>= 7.4.13.u70, <= 7.4.13.u73 | No fix yet |
| GHSA-22w7-m5f8-87vh Liferay Portal and Liferay DXP Vulnerable to Open Redirect via the Layout Module |
Medium EPSS 0.47% |
>= 7.4.13.u70, <= 7.4.13.u76 | No fix yet |
| GHSA-f43m-hhj4-q3jg Liferay Portal and Liferay DXP Includes LDAP Credentials in the Page URL |
Medium EPSS 0.52% |
>= 7.3.0, < 7.3.10.u4 | 7.3.10.u4 |
| GHSA-f43m-hhj4-q3jg Liferay Portal and Liferay DXP Includes LDAP Credentials in the Page URL |
Medium EPSS 0.52% |
No fix yet | |
| GHSA-f43m-hhj4-q3jg Liferay Portal and Liferay DXP Includes LDAP Credentials in the Page URL |
Medium EPSS 0.52% |
>= 7.0.0, <= 7.0.10.fp102 | No fix yet |
| GHSA-f43m-hhj4-q3jg Liferay Portal and Liferay DXP Includes LDAP Credentials in the Page URL |
Medium EPSS 0.52% |
>= 7.1.0, < 7.1.10.fp27 | 7.1.10.fp27 |
| GHSA-f43m-hhj4-q3jg Liferay Portal and Liferay DXP Includes LDAP Credentials in the Page URL |
Medium EPSS 0.52% |
>= 7.2.0, < 7.2.10.fp17 | 7.2.10.fp17 |
| GHSA-hw56-7xj4-7gx6 Liferay Portal and Liferay DXP Vulnerable to SQL Injection via Friendly URL Module |
Critical EPSS 0.78% |
>= 7.3.10.fp2, < 7.3.10.u4 | 7.3.10.u4 |
| GHSA-gxxj-fhmr-37j9 Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Layout Module |
High EPSS 1.05% |
>= 7.1.0, < 7.1.10.fp27 | 7.1.10.fp27 |
| GHSA-gxxj-fhmr-37j9 Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Layout Module |
High EPSS 1.05% |
>= 7.2.0, < 7.2.10.fp17 | 7.2.10.fp17 |
| GHSA-r5fj-j449-vqw2 Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment Module |
Critical EPSS 0.80% |
>= 7.4.0, < 7.4.13.u17 | 7.4.13.u17 |
| GHSA-r5fj-j449-vqw2 Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment Module |
Critical EPSS 0.80% |
>= 7.3.0, < 7.3.10.u4 | 7.3.10.u4 |
| GHSA-wjfm-qxg2-q679 Liferay Portal and Liferay DXP Vulnerable to XSS via the Commerce Module |
Medium EPSS 0.44% |
>= 7.3.0, < 7.3.10.u8 | 7.3.10.u8 |
| GHSA-mr77-4pm4-x9vm Liferay Portal and Liferay DXP Vulnerable to XSS via the Portal Search Module |
Medium EPSS 1.02% |
>= 7.2.0, < 7.2.10.fp15 | 7.2.10.fp15 |
| GHSA-mr77-4pm4-x9vm Liferay Portal and Liferay DXP Vulnerable to XSS via the Portal Search Module |
Medium EPSS 1.02% |
>= 7.1.0, < 7.1.10.fp27 | 7.1.10.fp27 |
| GHSA-p768-r2m2-8vjr Liferay Portal and Liferay DXP Vulnerable to XSS via the Sharing Module |
Medium EPSS 0.57% |
>= 7.2.0, < 7.2.10.fp19 | 7.2.10.fp19 |
| GHSA-p768-r2m2-8vjr Liferay Portal and Liferay DXP Vulnerable to XSS via the Sharing Module |
Medium EPSS 0.57% |
>= 7.3.0, < 7.3.10.u4 | 7.3.10.u4 |
| GHSA-2qwm-9mg5-jwq8 Liferay Portal and Liferay DXP Vulnerable to XSS via the Announcements Module |
Medium EPSS 0.63% |
>= 7.2.0, < 7.2.10.fp17 | 7.2.10.fp17 |
| GHSA-2qwm-9mg5-jwq8 Liferay Portal and Liferay DXP Vulnerable to XSS via the Announcements Module |
Medium EPSS 0.63% |
>= 7.1.0, < 7.1.10.fp27 | 7.1.10.fp27 |
| GHSA-g6r2-6x46-jpp6 Liferay Portal and Liferay DXP Vulnerable to XSS in the Frontend Taglib Module |
Medium EPSS 0.68% |
>= 7.4.0, < 7.4.13.u17 | 7.4.13.u17 |
| GHSA-g6r2-6x46-jpp6 Liferay Portal and Liferay DXP Vulnerable to XSS in the Frontend Taglib Module |
Medium EPSS 0.68% |
>= 7.3.0, < 7.3.10.u6 | 7.3.10.u6 |
| GHSA-67jp-27jj-6x85 Liferay Portal and Liferay DXP Vulnerable to XSS in the CKEditor Integration with the Frontend Editor Module |
Medium EPSS 0.61% |
>= 7.3.0, < 7.3.10.u6 | 7.3.10.u6 |
| GHSA-67jp-27jj-6x85 Liferay Portal and Liferay DXP Vulnerable to XSS in the CKEditor Integration with the Frontend Editor Module |
Medium EPSS 0.61% |
>= 7.4.0, < 7.4.13.u15 | 7.4.13.u15 |
| GHSA-cmrw-cgfc-v6x2 Liferay Portal and Liferay DXP Vulnerable to XSS via the Role Module |
Medium EPSS 0.59% |
>= 7.4.0, < 7.4.13.u37 | 7.4.13.u37 |
| GHSA-r32w-v775-5952 Liferay Portal and Liferay DXP Vulnerable to XSS via the Document Library Module |
Medium EPSS 0.61% |
>= 7.4.13.u30, < 7.4.13.u37 | 7.4.13.u37 |
| GHSA-7f7g-vhff-mjqj Liferay Portal and Liferay DXP Vulnerable to XSS via the Portal Search Module |
Medium EPSS 0.59% |
>= 7.3.0, < 7.3.10.u5 | 7.3.10.u5 |
| GHSA-7f7g-vhff-mjqj Liferay Portal and Liferay DXP Vulnerable to XSS via the Portal Search Module |
Medium EPSS 0.59% |
>= 7.4.0, < 7.4.13.u25 | 7.4.13.u25 |
| GHSA-7f7g-vhff-mjqj Liferay Portal and Liferay DXP Vulnerable to XSS via the Portal Search Module |
Medium EPSS 0.59% |
>= 7.2.0, < 7.2.10.fp19 | 7.2.10.fp19 |
| GHSA-h9ww-wjg4-jvvg Liferay Portal and Liferay DXP Fails to Check Permissions in Translation Module |
Medium EPSS 0.68% |
>= 7.4.13.u8, < 7.4.13.u37 | 7.4.13.u37 |
| GHSA-8mp9-w7gr-pvj3 Liferay Portal and Liferay DXP Vulnerable to XSS via the filter_ Prefix |
Medium EPSS 0.45% |
< 7.4.3.5-ga5 | 7.4.3.5-ga5 |
| GHSA-w397-9p2j-6x23 Liferay Portal and Liferay DXP HtmlUtil.escapeRedirect Can Be Circumvented |
Medium EPSS 0.60% |
>= 7.2.10.fp5, < 7.2.10.fp14 | 7.2.10.fp14 |
| GHSA-w397-9p2j-6x23 Liferay Portal and Liferay DXP HtmlUtil.escapeRedirect Can Be Circumvented |
Medium EPSS 0.60% |
>= 7.0.10.fp91, < 7.0.10.fp101 | 7.0.10.fp101 |
| GHSA-w397-9p2j-6x23 Liferay Portal and Liferay DXP HtmlUtil.escapeRedirect Can Be Circumvented |
Medium EPSS 0.60% |
>= 7.1.10.fp17, < 7.1.10.fp25 | 7.1.10.fp25 |
| GHSA-7r3w-wggm-pjwf Liferay Portal and Liferay DXP Vulnerable to XSS in the Portal Search Module |
Medium EPSS 0.53% |
>= 7.2.0 | No fix yet |
| GHSA-7r3w-wggm-pjwf Liferay Portal and Liferay DXP Vulnerable to XSS in the Portal Search Module |
Medium EPSS 0.53% |
>= 7.1.0 | No fix yet |
| GHSA-7m65-hmvg-rxpc Liferay Portal and Liferay DXP Vulnerable to XSS in the Site Module |
Medium EPSS 0.68% |
>= 7.1.0, < 7.1.10.fp26 | 7.1.10.fp26 |
| GHSA-7m65-hmvg-rxpc Liferay Portal and Liferay DXP Vulnerable to XSS in the Site Module |
Medium EPSS 0.68% |
>= 7.2.0, < 7.2.10.fp15 | 7.2.10.fp15 |
| GHSA-7m65-hmvg-rxpc Liferay Portal and Liferay DXP Vulnerable to XSS in the Site Module |
Medium EPSS 0.68% |
>= 7.0.0, < 7.0.10.fp102 | 7.0.10.fp102 |
| GHSA-vwj8-4grf-3r8v Liferay Portal and Liferay DXP fails to invalidate password reset tokens after use |
High EPSS 1.20% |
>= 7.0.0, < 7.0.10.fp96 | 7.0.10.fp96 |
| GHSA-vwj8-4grf-3r8v Liferay Portal and Liferay DXP fails to invalidate password reset tokens after use |
High EPSS 1.20% |
>= 7.2.0, < 7.2.10.fp5 | 7.2.10.fp5 |
| GHSA-vwj8-4grf-3r8v Liferay Portal and Liferay DXP fails to invalidate password reset tokens after use |
High EPSS 1.20% |
>= 7.1.0, < 7.1.10.fp18 | 7.1.10.fp18 |
| GHSA-w28v-87g6-cjr6 Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via the currentURL Parameter |
Medium EPSS 0.75% |
>= 7.2.0, < 7.2.10.fp12 | 7.2.10.fp12 |
| GHSA-w28v-87g6-cjr6 Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via the currentURL Parameter |
Medium EPSS 0.75% |
>= 7.1.0, < 7.1.10.fp23 | 7.1.10.fp23 |
| GHSA-w28v-87g6-cjr6 Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via the currentURL Parameter |
Medium EPSS 0.75% |
>= 7.0, < 7.0.10.fp99 | 7.0.10.fp99 |
| GHSA-w28v-87g6-cjr6 Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via the currentURL Parameter |
Medium EPSS 0.75% |
>= 7.3.0, < 7.3.10.fp1 | 7.3.10.fp1 |
| GHSA-5gh9-g62h-f35m Liferay Portal and Liferay DXP Has Company Administrator Accounts Vulnerable to Takeovers |
High EPSS 1.31% |
>= 7.2.0, < 7.2.10.fp9 | 7.2.10.fp9 |
| GHSA-5gh9-g62h-f35m Liferay Portal and Liferay DXP Has Company Administrator Accounts Vulnerable to Takeovers |
High EPSS 1.31% |
>= 7.1.0, < 7.1.10.fp20 | 7.1.10.fp20 |
| GHSA-fvg6-9r88-7w85 Liferay Portal Journal Module and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) |
Medium EPSS 0.68% |
>= 7.1.0, < 7.1.10.fp18 | 7.1.10.fp18 |
| GHSA-4frg-rpx6-96qh Liferay Portal Layout Module and Liferay DXP Exposes the Cross-Site Request Forgery (CSRF) Token in URLs |
High EPSS 0.42% |
>= 7.2.0, < 7.2.10.fp6 | 7.2.10.fp6 |
| GHSA-4frg-rpx6-96qh Liferay Portal Layout Module and Liferay DXP Exposes the Cross-Site Request Forgery (CSRF) Token in URLs |
High EPSS 0.42% |
>= 7.1.0, < 7.1.10.fp19 | 7.1.10.fp19 |
| GHSA-fvg6-9r88-7w85 Liferay Portal Journal Module and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) |
Medium EPSS 0.68% |
>= 7.2.10.fp5, < 7.2.10.fp7 | 7.2.10.fp7 |
| GHSA-7pxh-q6jw-6xj8 Liferay Portal Fragment Module and Liferay DXP Vulnerable to Cross-Site Scripting |
Medium EPSS 0.67% |
>= 7.2.0, < 7.2.10.fp9 | 7.2.10.fp9 |
| GHSA-v88g-7fx4-9q7f Liferay Portal and Liferay DXP Cross-site scripting (XSS) vulnerability in the Document Library module |
Medium EPSS 0.80% |
>= 7.2.0, < 7.2.10.fp9 | 7.2.10.fp9 |
| GHSA-v88g-7fx4-9q7f Liferay Portal and Liferay DXP Cross-site scripting (XSS) vulnerability in the Document Library module |
Medium EPSS 0.80% |
>= 7.1.0, < 7.1.10.fp20 | 7.1.10.fp20 |
| GHSA-6c88-gvxw-f5hg Liferay Portal and Liferay DXP Stores User Passwords in Cleartext |
Medium EPSS 0.57% |
>= 7.1.0, < 7.1.10.fp19 | 7.1.10.fp19 |
| GHSA-474f-cmx5-gm69 Liferay Portal and Liferay DXP Don't Check Permissions of Pages |
Medium EPSS 0.88% |
< 7.1.10.fp20 | 7.1.10.fp20 |
| GHSA-474f-cmx5-gm69 Liferay Portal and Liferay DXP Don't Check Permissions of Pages |
Medium EPSS 0.88% |
>= 7.2.0, < 7.2.10.fp5 | 7.2.10.fp5 |
| GHSA-6c88-gvxw-f5hg Liferay Portal and Liferay DXP Stores User Passwords in Cleartext |
Medium EPSS 0.57% |
< 7.0.10.fp93 | 7.0.10.fp93 |
| GHSA-hgjv-7wjr-qwqp Liferay Portal and Liferay DXP Cross-site scripting (XSS) vulnerability in the Frontend JS module |
Medium EPSS 1.02% |
>= 7.2.0, < 7.2.10.fp9 | 7.2.10.fp9 |
| GHSA-hgjv-7wjr-qwqp Liferay Portal and Liferay DXP Cross-site scripting (XSS) vulnerability in the Frontend JS module |
Medium EPSS 1.02% |
>= 7.1.0, < 7.1.10.fp20 | 7.1.10.fp20 |
| GHSA-hgjv-7wjr-qwqp Liferay Portal and Liferay DXP Cross-site scripting (XSS) vulnerability in the Frontend JS module |
Medium EPSS 1.02% |
>= 7.0.0, < 7.0.10.fp96 | 7.0.10.fp96 |
| GHSA-wg4x-hf94-fj5v Liferay Portal and Liferay DXP vulnerable to email spam via lack of flagging rate |
Medium EPSS 1.16% |
>= 7.0.0, < 7.0.10.fp96 | 7.0.10.fp96 |
| GHSA-fxpf-jr2q-vpvv Liferay Portal and Liferay DXP autosaves form data for other users to see |
High EPSS 1.03% |
>= 7.2.0, < 7.2.10.fp7 | 7.2.10.fp7 |
| GHSA-fxpf-jr2q-vpvv Liferay Portal and Liferay DXP autosaves form data for other users to see |
High EPSS 1.03% |
>= 7.1.0, < 7.1.10.fp19 | 7.1.10.fp19 |
| GHSA-6c88-gvxw-f5hg Liferay Portal and Liferay DXP Stores User Passwords in Cleartext |
Medium EPSS 0.57% |
>= 7.2.0, < 7.2.10.fp7 | 7.2.10.fp7 |
| GHSA-22wc-7wmm-v4cc Liferay Portal and Liferay DXP does not properly check user permission |
Medium EPSS 0.86% |
>= 7.2.0, < 7.2.10.fp8 | 7.2.10.fp8 |
| GHSA-22wc-7wmm-v4cc Liferay Portal and Liferay DXP does not properly check user permission |
Medium EPSS 0.86% |
>= 7.1.10.fp18, < 7.1.10.fp19 | 7.1.10.fp19 |
| GHSA-22wc-7wmm-v4cc Liferay Portal and Liferay DXP does not properly check user permission |
Medium EPSS 0.86% |
>= 7.0.10.fp93, < 7.0.10.fp95 | 7.0.10.fp95 |
| GHSA-vpvm-3wfw-5f5c Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in Edit Vocabulary Page |
Medium EPSS 0.68% |
>= 7.2.0, < 7.2.10.fp9 | 7.2.10.fp9 |
| GHSA-vpvm-3wfw-5f5c Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in Edit Vocabulary Page |
Medium EPSS 0.68% |
>= 7.1.0, < 7.1.10.fp20 | 7.1.10.fp20 |
| GHSA-vpvm-3wfw-5f5c Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in Edit Vocabulary Page |
Medium EPSS 0.68% |
>= 7.0.10.fp0, < 7.0.10.fp96 | 7.0.10.fp96 |
| GHSA-wg4x-hf94-fj5v Liferay Portal and Liferay DXP vulnerable to email spam via lack of flagging rate |
Medium EPSS 1.16% |
>= 7.2.0, < 7.2.10.fp5 | 7.2.10.fp5 |
| GHSA-wg4x-hf94-fj5v Liferay Portal and Liferay DXP vulnerable to email spam via lack of flagging rate |
Medium EPSS 1.16% |
>= 7.1.0, < 7.1.10.fp20 | 7.1.10.fp20 |
| GHSA-g37f-j8hh-736f Liferay Portal and Liferay DXP Fails to Properly Check User Permissions |
Medium EPSS 0.86% |
>= 7.1.0, < 7.1.10.fp19 | 7.1.10.fp19 |
| GHSA-mj8w-h522-jwm8 Liferay Portal and Liferay DXP Allows Arbitrary Redirect of Users to External URLs |
Medium EPSS 0.98% |
>= 7.2.0, < 7.2.10.fp8 | 7.2.10.fp8 |
| GHSA-g7xc-m762-wg8f Liferay Portal and Liferay DXP Fails to Check User Permissions for Workflow Submissions |
Medium EPSS 0.85% |
>= 7.2.0, < 7.2.10.fp6 | 7.2.10.fp6 |
| GHSA-mj8w-h522-jwm8 Liferay Portal and Liferay DXP Allows Arbitrary Redirect of Users to External URLs |
Medium EPSS 0.98% |
>= 7.0.10.fp0, < 7.0.10.fp94 | 7.0.10.fp94 |
| GHSA-mj8w-h522-jwm8 Liferay Portal and Liferay DXP Allows Arbitrary Redirect of Users to External URLs |
Medium EPSS 0.98% |
>= 7.1.0, < 7.1.10.fp19 | 7.1.10.fp19 |
| GHSA-g7xc-m762-wg8f Liferay Portal and Liferay DXP Fails to Check User Permissions for Workflow Submissions |
Medium EPSS 0.85% |
< 7.0.10.fp93 | 7.0.10.fp93 |
| GHSA-g7xc-m762-wg8f Liferay Portal and Liferay DXP Fails to Check User Permissions for Workflow Submissions |
Medium EPSS 0.85% |
>= 7.1.0, < 7.1.10.fp19 | 7.1.10.fp19 |
| GHSA-9995-qvcg-x7g6 Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) |
Medium EPSS 0.84% |
>= 7.1.0, < 7.1.10.fp19 | 7.1.10.fp19 |
| GHSA-9995-qvcg-x7g6 Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) |
Medium EPSS 0.84% |
>= 7.2.0, < 7.2.10.fp7 | 7.2.10.fp7 |
| GHSA-g37f-j8hh-736f Liferay Portal and Liferay DXP Fails to Properly Check User Permissions |
Medium EPSS 0.86% |
>= 7.2.0, < 7.2.10.fp6 | 7.2.10.fp6 |
| GHSA-g37f-j8hh-736f Liferay Portal and Liferay DXP Fails to Properly Check User Permissions |
Medium EPSS 0.86% |
>= 7.0.10.fp0, < 7.0.10.fp94 | 7.0.10.fp94 |
| GHSA-wcr5-3q96-c2gr Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via Membership Request Admin Page |
Medium EPSS 0.75% |
>= 7.3.0, < 7.3.10.fp1 | 7.3.10.fp1 |
| GHSA-wcr5-3q96-c2gr Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via Membership Request Admin Page |
Medium EPSS 0.75% |
>= 7.2.0, < 7.2.10.fp10 | 7.2.10.fp10 |
| GHSA-wcr5-3q96-c2gr Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via Membership Request Admin Page |
Medium EPSS 0.75% |
>= 7.1.0, < 7.1.10.fp21 | 7.1.10.fp21 |
| GHSA-qcv4-gv43-498v Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via the Redirect's Admin Page |
Medium EPSS 0.80% |
>= 7.3.10.fp0, < 7.3.10.fp1 | 7.3.10.fp1 |
| GHSA-wcr5-3q96-c2gr Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via Membership Request Admin Page |
Medium EPSS 0.75% |
>= 7.0.10.fp0, < 7.0.10.fp97 | 7.0.10.fp97 |
| GHSA-9g57-m5vf-qp73 Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via Asset Module Parameter |
Medium EPSS 0.88% |
>= 7.3.10.fp0, < 7.3.10.fp1 | 7.3.10.fp1 |
| GHSA-f9wj-c5pc-g9rh Liferay Portal and Liferay DXP Vulnerable to Multiple SQL Injections |
High EPSS 1.16% |
< 7.3.10.fp1 | 7.3.10.fp1 |
| GHSA-4fx8-82f3-xcpc Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in the Layout Admin Page |
Medium EPSS 0.87% |
< 7.2.10.fp11 | 7.2.10.fp11 |
| GHSA-xx2h-2hf5-v7vv Liferay Portal and Liferay DXP May Reveal S3 Store's Proxy Password |
Medium EPSS 0.74% |
>= 7.3.0, < 7.3.10.fp1 | 7.3.10.fp1 |
| GHSA-xx2h-2hf5-v7vv Liferay Portal and Liferay DXP May Reveal S3 Store's Proxy Password |
Medium EPSS 0.74% |
>= 7.2.0, < 7.2.10.fp10 | 7.2.10.fp10 |
| GHSA-4fx8-82f3-xcpc Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in the Layout Admin Page |
Medium EPSS 0.87% |
>= 7.3.0, < 7.3.10.fp1 | 7.3.10.fp1 |
| GHSA-xx2h-2hf5-v7vv Liferay Portal and Liferay DXP May Reveal S3 Store's Proxy Password |
Medium EPSS 0.74% |
>= 7.1.0, < 7.1.10.fp21 | 7.1.10.fp21 |
| GHSA-xx2h-2hf5-v7vv Liferay Portal and Liferay DXP May Reveal S3 Store's Proxy Password |
Medium EPSS 0.74% |
< 7.0.10.fp97 | 7.0.10.fp97 |
| GHSA-jvvx-8g42-9559 Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in Asset Publisher App |
Medium EPSS 0.75% |
>= 7.2.0, < 7.2.10.fp10 | 7.2.10.fp10 |
| GHSA-pr7v-qv65-rp9m Liferay Portal and Liferay DXP Fails to Check Permissions |
Medium EPSS 0.77% |
< 7.3.10.fp1 | 7.3.10.fp1 |
| GHSA-jvvx-8g42-9559 Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in Asset Publisher App |
Medium EPSS 0.75% |
>= 7.3.0, < 7.3.10.fp1 | 7.3.10.fp1 |
| GHSA-jvvx-8g42-9559 Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in Asset Publisher App |
Medium EPSS 0.75% |
< 7.1.10.fp21 | 7.1.10.fp21 |
| GHSA-87x7-pwrx-jch7 Liferay Portal and Liferay DXP Reveals Data via Overly Verbose Error Messages |
Medium EPSS 1.08% |
>= 7.2.0, < 7.2.10.fp10 | 7.2.10.fp10 |
| GHSA-9mxg-p873-6793 Liferay Portal and Liferay DXP Fails to Invalidate CAPTCHA Answers After Use |
High EPSS 1.06% |
< 7.3.10.fp1 | 7.3.10.fp1 |
| GHSA-87x7-pwrx-jch7 Liferay Portal and Liferay DXP Reveals Data via Overly Verbose Error Messages |
Medium EPSS 1.08% |
< 7.0.10.fp97 | 7.0.10.fp97 |
| GHSA-87x7-pwrx-jch7 Liferay Portal and Liferay DXP Reveals Data via Overly Verbose Error Messages |
Medium EPSS 1.08% |
>= 7.1.0, < 7.1.10.fp20 | 7.1.10.fp20 |
| GHSA-82j7-2h3j-hc7f Liferay DXP Vulnerable to Denial-of-service (DoS) in the Multi-Factor Authentication Module |
Medium EPSS 1.12% |
< 7.3.10.fp1 | 7.3.10.fp1 |
| GHSA-vrwx-q9pj-x488 Liferay Portal and Liferay DXP Bypass via Double Encoded URL |
Medium EPSS 1.22% |
>= 7.1.0, < 7.1.10.fp19 | 7.1.10.fp19 |
| GHSA-vrwx-q9pj-x488 Liferay Portal and Liferay DXP Bypass via Double Encoded URL |
Medium EPSS 1.22% |
>= 7.2.0, < 7.2.10.fp7 | 7.2.10.fp7 |
| GHSA-vrwx-q9pj-x488 Liferay Portal and Liferay DXP Bypass via Double Encoded URL |
Medium EPSS 1.22% |
< 7.0.10.fp93 | 7.0.10.fp93 |
| GHSA-mg3r-9jh8-33r9 Liferay Portal and Liferay DXP have Insecure Deserialization Vulnerability |
High EPSS 1.79% |
>= 7.2.0, < 7.2.10.fp5 | 7.2.10.fp5 |
| GHSA-mg3r-9jh8-33r9 Liferay Portal and Liferay DXP have Insecure Deserialization Vulnerability |
High EPSS 1.79% |
>= 7.1.0, < 7.1.10.fp17 | 7.1.10.fp17 |
| GHSA-mg3r-9jh8-33r9 Liferay Portal and Liferay DXP have Insecure Deserialization Vulnerability |
High EPSS 1.79% |
>= 7.0.0, < 7.0.10.fp90 | 7.0.10.fp90 |
| GHSA-773f-f929-qgjj Liferay Portal and Liferay DXP Potentially Reveal LDAP Server Password via Unsafe Connection |
High EPSS 1.51% |
>= 7.0.0, < 7.0.10.fp89 | 7.0.10.fp89 |
| GHSA-773f-f929-qgjj Liferay Portal and Liferay DXP Potentially Reveal LDAP Server Password via Unsafe Connection |
High EPSS 1.51% |
>= 7.1.0, < 7.1.10.fp17 | 7.1.10.fp17 |
| GHSA-773f-f929-qgjj Liferay Portal and Liferay DXP Potentially Reveal LDAP Server Password via Unsafe Connection |
High EPSS 1.51% |
>= 7.2.0, < 7.2.10.fp4 | 7.2.10.fp4 |
| GHSA-v377-8f8f-532h Liferay Portal and Liferay DXP Vulnerable to Arbitrary Code Execution |
High EPSS 3.69% |
>= 7.1.0, < 7.1.10.fp18 | 7.1.10.fp18 |
| GHSA-v377-8f8f-532h Liferay Portal and Liferay DXP Vulnerable to Arbitrary Code Execution |
High EPSS 3.69% |
>= 7.2.0, < 7.2.10.fp6 | 7.2.10.fp6 |
| GHSA-8j5r-9687-88w5 Liferay Portal and Liferay DXP Fails to Sanitize API Data |
Medium EPSS 1.59% |
>= 7.2.0, < 7.2.10.fp7 | 7.2.10.fp7 |
| GHSA-8j5r-9687-88w5 Liferay Portal and Liferay DXP Fails to Sanitize API Data |
Medium EPSS 1.59% |
>= 7.1.0, < 7.1.10.fp19 | 7.1.10.fp19 |
| GHSA-8j5r-9687-88w5 Liferay Portal and Liferay DXP Fails to Sanitize API Data |
Medium EPSS 1.59% |
>= 7.0.0, < 7.0.10.fp92 | 7.0.10.fp92 |
| GHSA-v377-8f8f-532h Liferay Portal and Liferay DXP Vulnerable to Arbitrary Code Execution |
High EPSS 3.69% |
>= 7.0.0, < 7.0.10.fp92 | 7.0.10.fp92 |
| GHSA-w7f2-6896-6mm2 Liferay Portal and Liferay DXP allows arbitrary injection via web content template names |
Medium EPSS 0.72% |
>= 7.1.0, < 7.1.10.fp19 | 7.1.10.fp19 |
| GHSA-w7f2-6896-6mm2 Liferay Portal and Liferay DXP allows arbitrary injection via web content template names |
Medium EPSS 0.72% |
>= 7.0.0, < 7.0.10.fp94 | 7.0.10.fp94 |
| GHSA-w7f2-6896-6mm2 Liferay Portal and Liferay DXP allows arbitrary injection via web content template names |
Medium EPSS 0.72% |
>= 7.2.0, < 7.2.10.fp8 | 7.2.10.fp8 |
| GHSA-3vww-jrmm-9vff Liferay Portal and Liferay DXP allows arbitrary injection via the site name |
Medium EPSS 0.72% |
>= 7.3.0, < 7.3.10.fp3 | 7.3.10.fp3 |
| GHSA-822f-jfpg-hg7h Liferay Portal and Liferay DXP fails to check permissions to view sites/groups |
Medium EPSS 0.75% |
>= 7.3.0, < 7.3.10.fp2 | 7.3.10.fp2 |
| GHSA-822f-jfpg-hg7h Liferay Portal and Liferay DXP fails to check permissions to view sites/groups |
Medium EPSS 0.75% |
>= 7.2.0, < 7.2.10.fp13 | 7.2.10.fp13 |
| GHSA-q2rp-xfj8-r95h Liferay Portal and Liferay DXP allows arbitrary injection via the name of an asset category |
Medium EPSS 0.58% |
>= 7.3.0, < 7.3.10.fp3 | 7.3.10.fp3 |
| GHSA-658f-xhv4-p978 Liferay Portal and Liferay DXP allows arbitrary injection via form field |
Medium EPSS 0.73% |
>= 7.3.0, < 7.3.10.fp3 | 7.3.10.fp3 |
| GHSA-jp3m-vh3g-6ggp Liferay Portal and Liferay DXP fails to properly import users from LDAP |
High EPSS 1.74% |
< 7.3.0-ga1 | 7.3.0-ga1 |
| GHSA-vw6g-gh6c-8qwp Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in the Gogo Shell module |
Medium EPSS 0.58% |
>= 7.1.0, < 7.1.10.fp23 | 7.1.10.fp23 |
| GHSA-vw6g-gh6c-8qwp Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in the Gogo Shell module |
Medium EPSS 0.58% |
>= 7.3.0, < 7.3.10.fp2 | 7.3.10.fp2 |
| GHSA-ffmm-5ww2-g3q4 Liferay Portal and Liferay DXP cross-site scripting (XSS) vulnerability via the script console |
Medium EPSS 0.88% |
<= 7.0 | No fix yet |
| GHSA-3x83-whxw-pvmg Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) |
Medium EPSS 0.58% |
<= 7.3 | No fix yet |
| GHSA-r39x-3qq4-gxmr Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in edit blog entry page |
Medium EPSS 0.58% |
>= 7.3.0, < 7.3.10.fp2 | 7.3.10.fp2 |
| GHSA-vw6g-gh6c-8qwp Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in the Gogo Shell module |
Medium EPSS 0.58% |
>= 7.2.0, < 7.2.10.fp13 | 7.2.10.fp13 |
| GHSA-ghw5-998m-vw4w Liferay Portal and Liferay DXP fails to check origin of event messages |
Medium EPSS 0.45% |
< 7.4.13.u5 | 7.4.13.u5 |
| GHSA-f855-2rvm-5j7h Liferay Portal and Liferay DXP has incorrect default permissions for site members |
Medium EPSS 0.78% |
>= 7.1.0, < 7.1.10.fp21 | 7.1.10.fp21 |
| GHSA-f855-2rvm-5j7h Liferay Portal and Liferay DXP has incorrect default permissions for site members |
Medium EPSS 0.78% |
>= 7.2.0, < 7.2.10.fp10 | 7.2.10.fp10 |
| GHSA-f855-2rvm-5j7h Liferay Portal and Liferay DXP has incorrect default permissions for site members |
Medium EPSS 0.78% |
>= 7.3.0, < 7.3.10.fp2 | 7.3.10.fp2 |
| GHSA-f855-2rvm-5j7h Liferay Portal and Liferay DXP has incorrect default permissions for site members |
Medium EPSS 0.78% |
>= 7.0.0, < 7.0.10.fp101 | 7.0.10.fp101 |
| GHSA-c7f6-4vx5-4263 Unrestricted Upload of File with Dangerous Type in Liferay Portal and Liferay DXP |
Medium EPSS 2.16% |
< 7.1.10.fp18 | 7.1.10.fp18 |
| GHSA-c7f6-4vx5-4263 Unrestricted Upload of File with Dangerous Type in Liferay Portal and Liferay DXP |
Medium EPSS 2.16% |
>= 7.2.1, < 7.2.10.fp6 | 7.2.10.fp6 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor