Known vulnerabilities in Liferay Enterprise Portal - page 7

Vendor: Liferay
Software CPE: cpe:2.3:a:liferay:liferay_portal:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 191
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Liferay Enterprise Portal Liferay Enterprise Portal is affected by 191 known vulnerabilities: 10 high, 56 medium, 125 low Critical High Medium Low

Vulnerabilities (191)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU56185 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
7.3.7 ga8 31.08.2021 SB2021083103
#VU55483 - Improper input validation
CWE-20 Medium
No
No
7.2.1 02.08.2021 SB2021080205
#VU55482 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
7.1.0 02.08.2021 SB2021080204
#VU54403 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
7.4.1 ga2 28.06.2021 SB2021062801
#VU53223 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-29044
CWE-79 Low
No
No
7.3.6 ga7 13.05.2021 SB2021051306
#VU53222 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-29053
CWE-89 Medium
No
No
7.3.6 ga7 13.05.2021 SB2021051306
#VU53221 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-29039
CWE-79 Low
No
No
7.3.5 ga6 13.05.2021 SB2021051305
#VU53060 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-29046
CWE-79 Low
No
No
7.3.6 ga7 11.05.2021 SB2021051103
#VU53059 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-29048
CWE-79 Low
No
No
7.3.6 ga7 11.05.2021 SB2021051103
#VU53058 - Protection Mechanism Failure
CVE-2021-29047
CWE-693 Low
No
No
7.3.6 ga7 11.05.2021 SB2021051103
#VU34347 - Improper input validation
CVE-2020-13444
CWE-20 Medium
No
No
- 10.06.2020 SB2020061060
#VU34348 - Improper input validation
CVE-2020-13445
CWE-20 High
No
No
- 10.06.2020 SB2020061060
#VU49689 - Deserialization of Untrusted Data
CVE-2020-7961
CWE-502 High
Available
Exploited
7.2.1 20.03.2020 SB2020032025
#VU35194 - Deserialization of Untrusted Data
CVE-2019-16891
CWE-502 High
No
No
- 04.10.2019 SB2019100409
#VU35859 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-6588
CWE-79 Low
Available
No
- 03.06.2019 SB2019060325
#VU35980 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-11444
CWE-78 Medium
No
No
- 22.04.2019 SB2019042214
#VU16013 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
7.1.1 22.11.2018 SB2018112207
#VU16012 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
7.1.1 22.11.2018 SB2018112207
#VU16011 - URL Redirection to Untrusted Site ('Open Redirect')
CWE-601 Low
No
No
7.1.1 22.11.2018 SB2018112207
#VU16010 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
7.1.1 22.11.2018 SB2018112207


Showing elements 121 - 140 out of 191