Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

CRM

Liferay DXP

Digital Experience Platform (DXP) is an emerging category of enterprise software seeking to meet the needs of companies undergoing digital transformation with the ultimate goal of providing better customer experiences. DXPs can be a single product but are often a suite of products that work together. DXPs provide an architecture for companies to digitize business operations deliver connected customer experiences and gather actionable customer insight.

Official Site:

https://www.liferay.com/en-AU/products/dxp

Severity Summary:

Critical: 1 High: 22 Medium: 103
Reference
Title
Severity
CVE-2022-42117
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2022-42118
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2022-42112
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2022-42110
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2024-25605
Liferay DXP Incorrect Default Permissions Vulnerability
Medium
CVE-2024-26269
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2024-25147
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2024-11993
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2024-26266
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2024-25603
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2024-25149
Liferay DXP Incorrect Authorization Vulnerability
Medium
CVE-2023-44309
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2024-25610
Liferay DXP Insecure Default Initialization of Resource Vulnerability
Medium
CVE-2021-33336
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2021-33320
Liferay DXP Allocation of Resources Without Limits or Throttling Vulnerability
Medium
CVE-2021-33324
Liferay DXP Incorrect Default Permissions Vulnerability
Medium
CVE-2021-33325
Liferay DXP Cleartext Storage of Sensitive Information Vulnerability
Medium
CVE-2021-33326
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2021-33327
Liferay DXP Incorrect Default Permissions Vulnerability
Medium
CVE-2021-33328
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2021-33331
Liferay DXP URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Medium
CVE-2021-33332
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2021-33333
Liferay DXP Incorrect Default Permissions Vulnerability
Medium
CVE-2021-33334
Liferay DXP Incorrect Default Permissions Vulnerability
Medium
CVE-2021-33339
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2021-38269
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2021-33337
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2021-29049
Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2021-29040
Liferay DXP Generation of Error Message Containing Sensitive Information Vulnerability
Medium
CVE-2021-29041
Liferay DXP Vulnerability
Medium