Known vulnerabilities in Liferay DXP - page 4

Vendor: Liferay
Software: Liferay DXP
Software CPE: cpe:2.3:a:liferay:liferay_dxp:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 72
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Liferay DXP Liferay DXP is affected by 72 known vulnerabilities: 1 high, 30 medium, 41 low Critical High Medium Low

Vulnerabilities (72)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76611 - Improper Access Control
CVE-2023-33949		 CWE-284 Medium
No
No
 7.3 GA1 29.05.2023 SB2023052920
#VU76604 - Exposure of sensitive information to an unauthorized actor
CVE-2023-33946		 CWE-200 Low
No
No
 7.4 update 49 29.05.2023 SB2023052922
#VU76600 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-33944		 CWE-79 Low
No
No
 7.3 update 24, 7.4 update 69 29.05.2023 SB2023052921
#VU76580 - Incorrect Regular Expression
CVE-2023-33950		 CWE-185 Medium
No
No
 7.4 update 77 26.05.2023 SB2023052622
#VU76578 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-33945		 CWE-89 Low
No
No
 7.3 update 6, 7.4 update 18 26.05.2023 SB2023052619
#VU76577 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-33937		 CWE-79 Low
No
No
 7.1 fix pack 18, 7.2 fix pack 5 26.05.2023 SB2023052616
#VU76526 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-33943		 CWE-79 Low
No
No
 7.4 update 63 25.05.2023 SB2023052532
#VU76525 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-33942		 CWE-79 Medium
No
No
 7.4 update 51 25.05.2023 SB2023052536
#VU76523 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-33941		 CWE-79 Low
No
No
 7.4 update 53 25.05.2023 SB2023052537
#VU76521 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-33940		 CWE-79 Low
No
No
 7.4 update 31 25.05.2023 SB2023052535
#VU76519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-33939		 CWE-79 Low
No
No
 7.1 fix pack 27, 7.2 fix pack 18, 7.3 update 4, 7.4 update 9 25.05.2023 SB2023052534
#VU76517 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-33938		 CWE-79 Low
No
No
 7.3 fix pack 14 25.05.2023 SB2023052533


Showing elements 61 - 80 out of 72