Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

CRM

Liferay DXP

Digital Experience Platform (DXP) is an emerging category of enterprise software seeking to meet the needs of companies undergoing digital transformation with the ultimate goal of providing better customer experiences. DXPs can be a single product but are often a suite of products that work together. DXPs provide an architecture for companies to digitize business operations deliver connected customer experiences and gather actionable customer insight.

Official Site:

https://www.liferay.com/en-AU/products/dxp

Severity Summary:

Critical: 1 High: 22 Medium: 103
Reference
Title
Severity
CVE-2024-26265
Liferay DXP Allocation of Resources Without Limits or Throttling Vulnerability
Medium
CVE-2024-26267
Liferay DXP Insecure Default Initialization of Resource Vulnerability
Medium
CVE-2024-26268
Liferay DXP Observable Discrepancy Vulnerability
Medium
CVE-2024-25151
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2023-47795
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2024-25152
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2024-8980
Liferay DXP Cross-Site Request Forgery (CSRF) Vulnerability
Medium
CVE-2024-25604
Liferay DXP Incorrect Authorization Vulnerability
Medium
CVE-2024-25150
Liferay DXP Other Vulnerability
Medium
CVE-2023-40191
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2022-45320
Liferay DXP Vulnerability
Medium
CVE-2023-42496
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2022-42129
Liferay DXP Authorization Bypass Through User-Controlled Key Vulnerability
Medium
CVE-2022-28977
Liferay DXP URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Medium
CVE-2022-28982
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2022-28978
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2022-39975
Liferay DXP Missing Authorization Vulnerability
Medium
CVE-2022-28979
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2022-38902
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2023-47798
Liferay DXP Session Fixation Vulnerability
Medium
CVE-2024-25146
Liferay DXP Observable Discrepancy Vulnerability
Medium
CVE-2022-42126
Liferay DXP Vulnerability
Medium
CVE-2022-42128
Liferay DXP Incorrect Default Permissions Vulnerability
Medium
CVE-2022-42131
Liferay DXP Improper Certificate Validation Vulnerability
Medium
CVE-2022-42132
Liferay DXP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2022-42130
Liferay DXP Incorrect Default Permissions Vulnerability
Medium
CVE-2023-42498
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2022-42119
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2022-38901
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2022-42114
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium