Known vulnerabilities in Liferay Enterprise Portal - page 6

Vendor: Liferay
Software CPE: cpe:2.3:a:liferay:liferay_portal:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 191
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Liferay Enterprise Portal Liferay Enterprise Portal is affected by 191 known vulnerabilities: 10 high, 56 medium, 125 low Critical High Medium Low

Vulnerabilities (191)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU60022 - Exposure of sensitive information to an unauthorized actor
CWE-200 Medium
No
No
7.3.7 ga8, 7.4.3.4 ga4 26.01.2022 SB2022012620
#VU60020 - URL Redirection to Untrusted Site ('Open Redirect')
CWE-601 Medium
No
No
7.3.7 ga8, 7.4.3.4 ga4 26.01.2022 SB2022012617
#VU60019 - URL Redirection to Untrusted Site ('Open Redirect')
CWE-601 Medium
No
No
7.3.7 ga8, 7.4.3.4 ga4 26.01.2022 SB2022012617
#VU60018 - Exposure of sensitive information to an unauthorized actor
CWE-200 Medium
No
No
7.3.7 ga8, 7.4.2 ga3 26.01.2022 SB2022012618
#VU60017 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
7.4.2 ga3 26.01.2022 SB2022012618
#VU60016 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
7.3.7 ga8, 7.4.1 ga2 26.01.2022 SB2022012619
#VU60015 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
7.3.7 ga8, 7.4.1 ga2 26.01.2022 SB2022012619
#VU60014 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
7.3.7 ga8, 7.4.1 ga2 26.01.2022 SB2022012619
#VU60013 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
7.3.7 ga8, 7.4.1 ga2 26.01.2022 SB2022012619
#VU60012 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
7.3.7 ga8, 7.4.2 ga3 26.01.2022 SB2022012618
#VU60011 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Medium
No
No
7.4.3.4 ga4 26.01.2022 SB2022012617
#VU60010 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
7.3.7 ga8, 7.4.3.4 ga4 26.01.2022 SB2022012617
#VU60009 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
7.3.7 ga8, 7.4.3.4 ga4 26.01.2022 SB2022012617
#VU60006 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
7.4.3.5 ga5 25.01.2022 SB2022012616
#VU56188 - Permissions, Privileges, and Access Controls
CWE-264 Medium
No
No
7.2.1 ga2, 7.3.7 ga8 31.08.2021 SB2021083108
#VU56187 - Improper input validation
CWE-20 Medium
No
No
7.2.1 ga2 31.08.2021 SB2021083107
#VU56186 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
7.2.1 ga2, 7.3.3 ga4 31.08.2021 SB2021083106
#VU56184 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
7.3.7 ga8 31.08.2021 SB2021083103
#VU56183 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
7.2.1 ga2, 7.3.7 ga8, 7.4.1 ga2 31.08.2021 SB2021083105
#VU56182 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-35463
CWE-79 Low
No
No
7.4.2 ga3 31.08.2021 SB2021083104


Showing elements 101 - 120 out of 191