Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

liferay liferay portal 7.0.6 vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2020-7961
Deserialization of Untrusted Data in Liferay Portal before 7.2.1 CE GA2 allows remote malicious users to execute arbitrary code via JSON web services (JSONWS).
Liferay Liferay Portal
9.8
CVSSv3
CVE-2019-16891
Liferay Portal CE 6.2.5 allows remote command execution because of deserialization of a JSON payload.
Liferay Liferay Portal 7.1.0Liferay Liferay Portal 7.0.6Liferay Liferay Portal 7.0.5Liferay Liferay Portal 7.0.4Liferay Liferay Portal 7.0.3Liferay Liferay Portal 7.0.2Liferay Liferay Portal 7.0.1Liferay Liferay Portal 7.0.0Liferay Liferay Portal 6.2.5Liferay Liferay Portal 6.2.4Liferay Liferay Portal 6.2.3Liferay Liferay Portal 6.2.2Liferay Liferay Portal 6.2.1Liferay Liferay Portal 6.2.0Liferay Liferay Portal 6.1.2Liferay Liferay Portal 6.1.1Liferay Liferay Portal 6.1.0Liferay Liferay PortalLiferay Liferay Portal 7.1.1Liferay Liferay Portal 7.1.2Liferay Liferay Portal 7.1.3Liferay Liferay Portal 7.2.0
4.7
CVSSv3
CVE-2019-6588
In Liferay Portal prior to 7.1 CE GA4, an XSS vulnerability exists in the SimpleCaptcha API when custom code passes unsanitized input into the "url" parameter of the JSP taglib call <liferay-ui:captcha url="<%= url %>" /> or <liferay-captcha:cap...
Liferay Liferay Portal 7.1.0Liferay Liferay Portal 7.0.4Liferay Liferay Portal 7.0.3Liferay Liferay Portal 7.0.0Liferay Liferay Portal 6.2.4Liferay Liferay Portal 6.2.3Liferay Liferay Portal 6.2.2Liferay Liferay Portal 6.2.0Liferay Liferay Portal 6.1.0Liferay Liferay PortalLiferay Liferay Portal 7.0.6Liferay Liferay Portal 7.0.5Liferay Liferay Portal 6.2.5Liferay Liferay Portal 7.0.2Liferay Liferay Portal 7.0.1Liferay Liferay Portal 6.2.1Liferay Liferay Portal 6.1.2Liferay Liferay Portal 6.1.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook