Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

CMS

Liferay Portal

Liferay Portal is the worlds leading enterprise open source portal framework offering integrated Web publishing and content management an enterprise service bus and service-oriented architecture and compatibility with all major IT infrastructure.

Official Site:

https://www.liferay.com/downloads-community

Severity Summary:

Critical: 3 High: 35 Medium: 136 Low: 2
Reference
Title
Severity
CVE-2011-1502
Liferay Portal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2009-3742
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2021-29052
Liferay Portal Incorrect Default Permissions Vulnerability
Medium
CVE-2024-25143
Liferay Portal Allocation of Resources Without Limits or Throttling Vulnerability
Medium
CVE-2024-25144
Liferay Portal Excessive Iteration Vulnerability
Medium
CVE-2021-29048
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2024-25145
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2023-47797
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2024-25151
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2022-26595
Liferay Portal Incorrect Default Permissions Vulnerability
Medium
CVE-2024-25602
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2022-42128
Liferay Portal Incorrect Default Permissions Vulnerability
Medium
CVE-2022-28977
Liferay Portal URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Medium
CVE-2022-28980
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2022-28982
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2022-38512
Liferay Portal Missing Authorization Vulnerability
Medium
CVE-2022-28978
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2022-39975
Liferay Portal Missing Authorization Vulnerability
Medium
CVE-2022-28979
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2023-47798
Liferay Portal Session Fixation Vulnerability
Medium
CVE-2024-25146
Liferay Portal Observable Discrepancy Vulnerability
Medium
CVE-2022-38902
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2022-42119
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2017-17868
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2022-42126
Liferay Portal Vulnerability
Medium
CVE-2022-42127
Liferay Portal Incorrect Default Permissions Vulnerability
Medium
CVE-2022-42131
Liferay Portal Improper Certificate Validation Vulnerability
Medium
CVE-2023-42629
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2022-42112
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2022-45320
Liferay Portal Vulnerability
Medium