Known vulnerabilities in Liferay Enterprise Portal - page 10

Vendor: Liferay
Software CPE: cpe:2.3:a:liferay:liferay_portal:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 191
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Liferay Enterprise Portal Liferay Enterprise Portal is affected by 191 known vulnerabilities: 10 high, 56 medium, 125 low Critical High Medium Low

Vulnerabilities (191)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU8560 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
- 21.09.2017 SB2016082404
#VU8558 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
- 21.09.2017 SB2016082404
#VU8557 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
- 21.09.2017 SB2016082404
#VU8556 - URL Redirection to Untrusted Site ('Open Redirect')
CWE-601 Low
No
No
- 21.09.2017 SB2016082404
#VU8555 - Exposure of sensitive information to an unauthorized actor
CWE-200 Low
No
No
- 21.09.2017 SB2016082404
#VU8554 - Improper Restriction of XML External Entity Reference ('XXE')
CWE-611 Medium
No
No
- 21.09.2017 SB2016082404
#VU8553 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
- 21.09.2017 SB2016082404
#VU8552 - Improper Access Control
CWE-284 Low
No
No
- 21.09.2017 SB2016082404
#VU8542 - Improper Control of Generation of Code ('Code Injection')
CVE-2010-5327
CWE-94 Medium
No
No
- 13.01.2017 SB2016061404
#VU8540 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-3670
CWE-79 Low
Available
No
- 14.06.2016 SB2016061404
#VU41487 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-2963
CWE-79 Low
No
No
- 10.07.2014 SB2014071003


Showing elements 181 - 200 out of 191