Known vulnerabilities in Liferay Enterprise Portal 7.4.3.12 ga12 - page 2

Vendor: Liferay
Version: 7.4.3.12 ga12
Software CPE: cpe:2.3:a:liferay:liferay_portal:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 50
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Liferay Enterprise Portal version 7.4.3.12 ga12 Liferay Enterprise Portal 7.4.3.12 ga12 is affected by 50 vulnerabilities: 1 high, 21 medium, 28 low Critical High Medium Low

Vulnerabilities (50)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86677 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-26269
CWE-79 Low
No
No
7.4.3.38 ga38 21.02.2024 SB2024022109
#VU86674 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-42498
CWE-79 Low
No
No
7.4.3.98 ga98 21.02.2024 SB2024022108
#VU86601 - Permissions, Privileges, and Access Controls
CVE-2022-45320
CWE-264 Medium
No
No
7.4.3.16 ga16 20.02.2024 SB2024022006
#VU86266 - Improper input validation
CVE-2024-25144
CWE-20 Low
No
No
7.4.3.27 ga27 08.02.2024 SB2024020859
#VU83256 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-47797
CWE-79 Medium
No
No
7.4.3.96 ga96 17.11.2023 SB2023111745
#VU82178 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-42628
CWE-79 Low
No
No
7.4.3.92 ga92 18.10.2023 SB2023101808
#VU82177 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-42627
CWE-79 Low
No
No
7.4.3.92 ga92 18.10.2023 SB2023101807
#VU82087 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-42497
CWE-79 Low
No
No
7.4.3.86 ga86 17.10.2023 SB2023101727
#VU82086 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-42629
CWE-79 Low
No
No
7.4.3.88 ga88 17.10.2023 SB2023101726
#VU82085 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-44310
CWE-79 Low
No
No
7.4.3.79 ga79 17.10.2023 SB2023101725
#VU82084 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-44309
CWE-79 Low
No
No
7.4.3.54 ga54 17.10.2023 SB2023101724
#VU76606 - Exposure of sensitive information to an unauthorized actor
CVE-2023-33947
CWE-200 Low
No
No
7.4.3.61 ga61 29.05.2023 SB2023052923
#VU76604 - Exposure of sensitive information to an unauthorized actor
CVE-2023-33946
CWE-200 Low
No
No
7.4.3.49 ga49 29.05.2023 SB2023052922
#VU76600 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-33944
CWE-79 Low
No
No
7.4.3.69 ga69 29.05.2023 SB2023052921
#VU76578 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-33945
CWE-89 Low
No
No
7.4.3.18 ga18 26.05.2023 SB2023052619
#VU76521 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-33940
CWE-79 Low
No
No
7.4.3.31 ga31 25.05.2023 SB2023052535
#VU76519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-33939
CWE-79 Low
No
No
7.4.3.13 ga13 25.05.2023 SB2023052534
#VU68493 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-42125
CWE-22 Medium
No
No
7.4.3.36 ga36 19.10.2022 SB2022101939
#VU68492 - Permissions, Privileges, and Access Controls
CVE-2022-42126
CWE-264 Medium
No
No
7.4.3.29 ga29 19.10.2022 SB2022101938
#VU68490 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-42123
CWE-22 Medium
No
No
7.4.3.19 ga19 19.10.2022 SB2022101937


Showing elements 21 - 40 out of 50