Known vulnerabilities in Liferay Enterprise Portal - page 9

Vendor: Liferay
Software CPE: cpe:2.3:a:liferay:liferay_portal:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 191
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Liferay Enterprise Portal Liferay Enterprise Portal is affected by 191 known vulnerabilities: 10 high, 56 medium, 125 low Critical High Medium Low

Vulnerabilities (191)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU12210 - Exposure of sensitive information to an unauthorized actor
CWE-200 Low
No
No
- 26.04.2018 SB2018042602
#VU12208 - Exposure of sensitive information to an unauthorized actor
CWE-200 Low
No
No
- 26.04.2018 SB2018042602
#VU12206 - URL Redirection to Untrusted Site ('Open Redirect')
CWE-601 Low
No
No
- 26.04.2018 SB2018042602
#VU12204 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
- 26.04.2018 SB2018042602
#VU12203 - Resource exhaustion
CWE-400 Low
No
No
- 26.04.2018 SB2018042602
#VU12194 - Exposure of sensitive information to an unauthorized actor
CWE-200 Low
No
No
- 26.04.2018 SB2018042602
#VU12192 - Permissions, Privileges, and Access Controls
CWE-264 Low
No
No
- 26.04.2018 SB2018042602
#VU37738 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-17868
CWE-79 Low
No
No
- 27.12.2017 SB2017122709
#VU8550 - Exposure of sensitive information to an unauthorized actor
CWE-200 Low
No
No
- 21.09.2017 SB2017080825
#VU8549 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
- 21.09.2017 SB2017080825
#VU8548 - Improper input validation
CWE-20 Low
No
No
- 21.09.2017 SB2017080825
#VU8547 - Resource exhaustion
CWE-400 Medium
No
No
- 21.09.2017 SB2017080825
#VU8497 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-12645
CWE-79 Low
No
No
- 07.08.2017 SB2017081018
#VU8498 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-10404
CWE-79 Low
No
No
- 07.08.2017 SB2017081018
#VU8499 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-12649
CWE-79 Low
No
No
- 07.08.2017 SB2017081018
#VU8500 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-12648
CWE-79 Low
No
No
- 07.08.2017 SB2017081018
#VU8501 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-12647
CWE-79 Low
No
No
- 07.08.2017 SB2017081018
#VU8502 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-12646
CWE-79 Low
No
No
- 07.08.2017 SB2017081018
#VU7654 - Improper input validation
CVE-2017-9801
CWE-20 Low
No
No
- 02.08.2017 SB2017080203
SB2018042602
SB2022072718
#VU8503 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2016-6517
CWE-22 Medium
No
No
- 23.01.2017 SB2017012404


Showing elements 161 - 180 out of 191