CRM

Liferay DXP

Digital Experience Platform (DXP) is an emerging category of enterprise software seeking to meet the needs of companies undergoing digital transformation with the ultimate goal of providing better customer experiences. DXPs can be a single product but are often a suite of products that work together. DXPs provide an architecture for companies to digitize business operations deliver connected customer experiences and gather actionable customer insight.

Official Site:

https://www.liferay.com/en-AU/products/dxp

Severity Summary:

Critical: 1 High: 22 Medium: 103

Reference

Title

Severity

CVE-2021-29043

Liferay DXP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Medium

CVE-2021-29044

Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2021-29045

Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2021-29046

Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2021-29048

Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2021-29051

Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2021-29052

Liferay DXP Incorrect Default Permissions Vulnerability

Medium

CVE-2020-15839

Liferay DXP Unrestricted Upload of File with Dangerous Type Vulnerability

Medium

CVE-2021-38267

Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2024-25609

Liferay DXP URL Redirection to Untrusted Site (Open Redirect) Vulnerability

Medium

CVE-2023-33944

Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2024-25608

Liferay DXP URL Redirection to Untrusted Site (Open Redirect) Vulnerability

Medium

CVE-2024-25143

Liferay DXP Allocation of Resources Without Limits or Throttling Vulnerability

Medium

CVE-2024-25144

Liferay DXP Excessive Iteration Vulnerability

Medium

CVE-2024-25145

Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2023-42629

Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2023-44310

Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2023-42628

Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2023-42497

Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2021-33330

Liferay DXP Vulnerability

Medium

CVE-2023-33940

Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2023-33939

Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2023-33947

Liferay DXP Other Vulnerability

Medium

CVE-2021-38265

Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2023-33946

Liferay DXP Other Vulnerability

Medium

CVE-2023-33938

Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2023-33937

Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2022-42111

Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2022-42116

Liferay DXP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2022-25146

Liferay DXP Origin Validation Error Vulnerability

Medium