Known vulnerabilities in Liferay DXP 7.3 fix pack 14

Vendor: Liferay

Software: Liferay DXP

Version: 7.3 fix pack 14

Software CPE: cpe:2.3:a:liferay:liferay_dxp:*:*:*:*:*:*:*:*

Website:

Total vulnerabilities: 3

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 5.3

Vulnerabilities (3)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU86681 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-42496	CWE-79	Low	No	No	7.3 update 34, 2023.Q3.6	21.02.2024	SB2024022111
#VU86669 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-25151	CWE-79	Low	No	No	7.2 fix pack 15, 7.3 service pack 3	21.02.2024	SB2024022106
#VU86597 - Improper Access Control CVE-2024-25149	CWE-284	Medium	No	No	7.2 fix pack 15, 7.3 service pack 3	20.02.2024	SB2024022008