Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

CMS

Liferay Portal

Liferay Portal is the worlds leading enterprise open source portal framework offering integrated Web publishing and content management an enterprise service bus and service-oriented architecture and compatibility with all major IT infrastructure.

Official Site:

https://www.liferay.com/downloads-community

Severity Summary:

Critical: 3 High: 35 Medium: 136 Low: 2
Reference
Title
Severity
CVE-2022-28981
Liferay Portal Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
High
CVE-2019-11444
Liferay Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) Vulnerability
High
CVE-2020-24554
Liferay Portal URL Redirection to Untrusted Site (Open Redirect) Vulnerability
High
CVE-2010-5327
Liferay Portal Permissions Privileges and Access Controls Vulnerability
High
CVE-2021-29047
Liferay Portal Improper Authentication Vulnerability
High
CVE-2021-29053
Liferay Portal Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
High
CVE-2018-10795
Liferay Portal Unrestricted Upload of File with Dangerous Type Vulnerability
High
CVE-2021-38266
Liferay Portal Vulnerability
High
CVE-2023-5190
Liferay Portal URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Medium
CVE-2023-37940
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2023-40191
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2023-47795
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2023-42496
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2024-25603
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2024-26268
Liferay Portal Observable Discrepancy Vulnerability
Medium
CVE-2024-26266
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2024-25150
Liferay Portal Other Vulnerability
Medium
CVE-2024-25601
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2024-25152
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2024-26270
Liferay Portal Other Vulnerability
Medium
CVE-2023-42498
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2024-26265
Liferay Portal Allocation of Resources Without Limits or Throttling Vulnerability
Medium
CVE-2011-1571
Liferay Portal Vulnerability
Medium
CVE-2024-25149
Liferay Portal Incorrect Authorization Vulnerability
Medium
CVE-2024-26267
Liferay Portal Insecure Default Initialization of Resource Vulnerability
Medium
CVE-2024-25610
Liferay Portal Insecure Default Initialization of Resource Vulnerability
Medium
CVE-2024-25608
Liferay Portal URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Medium
CVE-2024-8980
Liferay Portal Cross-Site Request Forgery (CSRF) Vulnerability
Medium
CVE-2024-25604
Liferay Portal Incorrect Authorization Vulnerability
Medium
CVE-2024-25609
Liferay Portal URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Medium