LE
Product
Liferay Enterprise Portal
10
CVEs
0
On KEV
5.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch
Add Liferay Enterprise Portal to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-26268 | 5.3 | Feb 20 | User enumeration vulnerability in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versions, and Liferay DXP 7.4 before update 27, 7.3 before update 8, 7.2 before fix… Affected: 7.2.0 through 7.4.3.26 |
| CVE-2009-1294 | – | Apr 16 | Multiple cross-site scripting (XSS) vulnerabilities in web/guest/home in the Liferay 4.3.0 portal in Novell Teaming 1.0 through SP3 (1.0.3) allow remote attackers to inject… Affected: 4.3.0 |
| CVE-2008-0179 | – | Feb 5 | Cross-site scripting (XSS) vulnerability in service/impl/UserLocalServiceImpl.java in Liferay Portal 4.3.6 allows remote attackers to inject arbitrary web script or HTML via the… Affected: 4.3.6 |
| CVE-2008-0180 | – | Feb 5 | Cross-site scripting (XSS) vulnerability in themes/_unstyled/templates/init.vm in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via… Affected: 1.0; 2.0; 2.1.0; 2.1.1; 2.2.0; 3.6.1; +5 more |
| CVE-2008-0182 | – | Feb 5 | Cross-site request forgery (CSRF) vulnerability in the Admin portlet in Liferay Portal before 4.4.0 allows remote authenticated users to perform unspecified actions as unspecified… Affected: through 4.3.6 |
| CVE-2008-0563 | – | Feb 5 | Cross-site request forgery (CSRF) vulnerability in service/impl/UserLocalServiceImpl.java in Liferay Portal 4.3.6 allows remote attackers to perform unspecified actions as… Affected: 4.3.6 |
| CVE-2008-0181 | – | Feb 5 | Cross-site scripting (XSS) vulnerability in the Admin portlet in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the Shutdown… Affected: 4.3.6 |
| CVE-2008-0178 | – | Feb 5 | Cross-site scripting (XSS) vulnerability in the Enterprise Admin Session Monitoring component in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web… Affected: 4.3.6 |
| CVE-2007-6173 | – | Nov 30 | Cross-site scripting (XSS) vulnerability in c/portal/login in Liferay Enterprise Portal 4.3.1 allows remote attackers to inject arbitrary web script or HTML via the emailAddress… Affected: 4.3.1 |
| CVE-2004-2030 | – | May 22 | Multiple cross-site scripting (XSS) vulnerabilities in index.jsp for Liferay before 2.2.0 release 10/1/2004 allow remote attackers to inject arbitrary web script or HTML, as… Affected: through 2.1.1; 2.1.0 |
Showing 10