liferay liferay portal 7.3.4 vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

The SimpleCaptcha implementation in Liferay Portal 7.3.4, 7.3.5 and Liferay DXP 7.3 before fix pack 1 does not invalidate CAPTCHA answers after it is used, which allows remote malicious users to repeatedly perform actions protected by a CAPTCHA challenge by reusing the same CAPTC...

Liferay Dxp Liferay Dxp 7.3 Liferay Liferay Portal 7.3.4 Liferay Liferay Portal 7.3.5

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in the Layout module's page administration page in Liferay Portal 7.3.4, 7.3.5 and Liferay DXP 7.2 before fix pack 11 and 7.3 before fix pack 1 allows remote malicious users to inject arbitrary web script or HTML via the _com_liferay_...

Liferay Dxp 7.2 Liferay Dxp 7.3 Liferay Liferay Portal 7.3.4 Liferay Liferay Portal 7.3.5

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in the Asset module's categories administration page in Liferay Portal 7.3.4 allows remote malicious users to inject arbitrary web script or HTML via the site name.

Liferay Liferay Portal 7.3.4

3.5

CVSSv2

Cross-site scripting (XSS) vulnerability in the Fragment module in Liferay Portal 7.2.1 up to and including 7.3.4, and Liferay DXP 7.2 before fix pack 9 allows remote malicious users to inject arbitrary web script or HTML via the _com_liferay_site_admin_web_portlet_SiteAdminPortl...

Liferay Dxp 7.2 Liferay Liferay Portal

6.5

CVSSv2

Privilege escalation vulnerability in Liferay Portal 7.0.3 up to and including 7.3.4, and Liferay DXP 7.1 before fix pack 20, and 7.2 before fix pack 9 allows remote authenticated users with permission to update/edit users to take over a company administrator user account by edit...

Liferay Dxp 7.2 Liferay Dxp 7.1 Liferay Liferay Portal

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in the Document Library module's add document menu in Liferay Portal 7.3.0 up to and including 7.3.4, and Liferay DXP 7.1 before fix pack 20, and 7.2 before fix pack 9, allows remote malicious users to inject arbitrary web script or H...

Liferay Dxp 7.1 Liferay Dxp 7.2 Liferay Liferay Portal

3.5

CVSSv2

Cross-site scripting (XSS) vulnerability in the Asset module in Liferay Portal 7.3.4 up to and including 7.3.6 allow remote malicious users to inject arbitrary web script or HTML when creating a collection page via the _com_liferay_asset_list_web_portlet_AssetListPortlet_title pa...

Liferay Digital Experience Platform Liferay Liferay Portal

5

CVSSv2

The JSON web services in Liferay Portal 7.3.4 and previous versions, and Liferay DXP 7.0 before fix pack 97, 7.1 before fix pack 20 and 7.2 before fix pack 10 may provide overly verbose error messages, which allows remote malicious users to use the contents of error messages to h...

Liferay Dxp Liferay Dxp 7.0 Liferay Dxp 7.1 Liferay Dxp 7.2 Liferay Liferay Portal

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in the Frontend JS module in Liferay Portal 7.3.4 and previous versions, and Liferay DXP 7.0 before fix pack 96, 7.1 before fix pack 20 and 7.2 before fix pack 9, allows remote malicious users to inject arbitrary web script or HTML via the...

Liferay Dxp 7.0 Liferay Dxp 7.1 Liferay Dxp 7.2 Liferay Liferay Portal

3.5

CVSSv2

Cross-site scripting (XSS) vulnerability in the Asset module's edit vocabulary page in Liferay Portal 7.0.0 up to and including 7.3.4, and Liferay DXP 7.0 before fix pack 96, 7.1 before fix pack 20, and 7.2 before fix pack 9, allows remote malicious users to inject arbitrary...

Liferay Dxp 7.0 Liferay Dxp 7.1 Liferay Dxp 7.2 Liferay Liferay Portal

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook