Known vulnerabilities in Liferay Enterprise Portal - page 2

Vendor: Liferay
Software CPE: cpe:2.3:a:liferay:liferay_portal:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 191
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Liferay Enterprise Portal Liferay Enterprise Portal is affected by 191 known vulnerabilities: 10 high, 56 medium, 125 low Critical High Medium Low

Vulnerabilities (191)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86713 - Exposure of sensitive information to an unauthorized actor
CVE-2024-25605
CWE-200 Medium
No
No
7.4.3.5 ga5 22.02.2024 SB2024022215
#VU86693 - Improper Access Control
CVE-2024-25604
CWE-284 Medium
No
No
7.4.3.5 ga5 21.02.2024 SB2024022131
#VU86692 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-25606
CWE-611 Low
No
No
7.4.3.8 ga8 21.02.2024 SB2024022130
#VU86691 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-25610
CWE-79 Low
No
No
7.4.3.13 ga13 21.02.2024 SB2024022129
#VU86690 - Exposure of sensitive information to an unauthorized actor
CVE-2024-26268
CWE-200 Medium
No
No
7.4.3.27 ga27 21.02.2024 SB2024022128
#VU86687 - Exposure of sensitive information to an unauthorized actor
CVE-2024-26270
CWE-200 Medium
No
No
7.4.3.100 ga100 21.02.2024 SB2024022120
#VU86686 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-25147
CWE-79 Low
No
No
7.4.2 ga3 21.02.2024 SB2024022119
#VU86685 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-25602
CWE-79 Low
No
No
7.4.3.4 ga4 21.02.2024 SB2024022118
#VU86684 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-25601
CWE-79 Low
No
No
7.4.3.4 ga4 21.02.2024 SB2024022117
#VU86683 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-25152
CWE-79 Low
No
No
7.4.3.4 ga4 21.02.2024 SB2024022116
#VU86682 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-25603
CWE-79 Low
No
No
7.4.3.5 ga5 21.02.2024 SB2024022114
#VU86681 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-42496
CWE-79 Low
No
No
7.4.3.98 ga98 21.02.2024 SB2024022111
#VU86680 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-26266
CWE-79 Low
No
No
7.4.3.14 ga14 21.02.2024 SB2024022110
#VU86677 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-26269
CWE-79 Low
No
No
7.4.3.38 ga38 21.02.2024 SB2024022109
#VU86674 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-42498
CWE-79 Low
No
No
7.4.3.98 ga98 21.02.2024 SB2024022108
#VU86671 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-40191
CWE-79 Low
No
No
7.4.3.98 ga98 21.02.2024 SB2024022107
#VU86669 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-25151
CWE-79 Low
No
No
7.4.3.4 ga4 21.02.2024 SB2024022106
#VU86602 - Exposure of sensitive information to an unauthorized actor
CVE-2024-25150
CWE-200 Low
No
No
7.4.3.4 ga4 20.02.2024 SB2024022010
#VU86600 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-5190
CWE-601 Medium
No
No
7.4.3.102 ga102 20.02.2024 SB2024022007
#VU86597 - Improper Access Control
CVE-2024-25149
CWE-284 Medium
No
No
7.4.2 ga3 20.02.2024 SB2024022008


Showing elements 21 - 40 out of 191