Liferay Vulnérabilités

Chronologie

Taper

Produit

Liferay Portal149
Liferay DXP132
Liferay Enterprise Portal7
Liferay Liferay Portal3
Liferay CMS Portal1

Contre-mesures

Official Fix112
Temporary Fix0
Workaround0
Unavailable0
Not Defined56

Exploitabilité

High1
Functional0
Proof-of-Concept9
Unproven0
Not Defined158

Vecteur d'accès

Not Defined0
Physical0
Local0
Adjacent8
Network160

Authentification

Not Defined0
High7
Low110
None51

Interaction de l'utilisateur

Not Defined0
Required108
None60

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤444
≤552
≤636
≤730
≤85
≤90
≤101

CVSSv3 Temp

≤10
≤20
≤32
≤444
≤552
≤638
≤727
≤84
≤91
≤100

VulDB

≤10
≤20
≤35
≤477
≤556
≤613
≤715
≤81
≤90
≤101

NVD

≤10
≤20
≤30
≤40
≤57
≤615
≤719
≤86
≤94
≤102

CNA

≤10
≤20
≤32
≤40
≤57
≤613
≤713
≤81
≤914
≤109

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k52
<2k103
<5k13
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k161
<2k7
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter le volume du marché

🔴 CTI Activités

Affected Products (9): CMS Portal (1), DXP (132), Enterprise Portal (7), Liferay Enterprise Portal (1), Liferay Portal (3), Liferay Portal Enterprise (1), Portal (149), Portal CE (1), portal (1)

PubliéBaseTempVulnérabilitéProdExpConEPSSCTICVE
21/02/20246.26.2Liferay Portal/DXP Document cross site scriptingInconnueNot DefinedOfficial Fix0.000430.02CVE-2023-47795
21/02/20246.96.8Liferay Portal/DXP Javascript Style Link cross site scriptingInconnueNot DefinedOfficial Fix0.000430.02CVE-2024-25147
21/02/20246.26.2Liferay Portal/DXP Users Admin Module cross site scriptingInconnueNot DefinedOfficial Fix0.000430.02CVE-2024-25602
21/02/20246.26.2Liferay Portal/DXP Expando Module cross site scriptingInconnueNot DefinedOfficial Fix0.000430.02CVE-2024-25601
21/02/20246.26.2Liferay Portal/DXP Instance Settings for Accounts cross site scriptingInconnueNot DefinedOfficial Fix0.000430.02CVE-2023-40191
21/02/20244.44.4Liferay Portal/DXP Calendar Module cross site scriptingInconnueNot DefinedOfficial Fix0.000430.02CVE-2024-25151
21/02/20246.26.2Liferay Portal/DXP Message Board Widget cross site scriptingInconnueNot DefinedOfficial Fix0.000430.02CVE-2024-25152
21/02/20246.26.2Liferay Portal/DXP DDMForm cross site scriptingInconnueNot DefinedOfficial Fix0.000430.02CVE-2024-25603
21/02/20246.96.8Liferay Portal/DXP Add Assignees to a Role Page cross site scriptingInconnueNot DefinedOfficial Fix0.000430.02CVE-2023-42496
21/02/20246.26.2Liferay Portal/DXP cross site scriptingInconnueNot DefinedOfficial Fix0.000430.02CVE-2024-26266
21/02/20246.96.8Liferay Portal/DXP portlet.js cross site scriptingInconnueNot DefinedOfficial Fix0.000430.02CVE-2024-26269
21/02/20246.96.8Liferay Portal/DXP cross site scriptingInconnueNot DefinedOfficial Fix0.000430.02CVE-2023-42498
21/02/20244.34.1Liferay DXP/Portal cross site request forgeryInconnueNot DefinedOfficial Fix0.000430.02CVE-2021-29050
21/02/20243.13.0Liferay DXP/Portal Password Reminder Page divulgation de l'informationInconnueNot DefinedOfficial Fix0.000430.02CVE-2021-29038
20/02/20246.26.2Liferay Portal/DXP Entry Content Text cross site scriptingInconnueNot DefinedOfficial Fix0.000430.03CVE-2024-25610
20/02/20244.54.4Liferay Portal/DXP divulgation de l'informationInconnueNot DefinedOfficial Fix0.000430.02CVE-2024-26268
20/02/20245.15.0Liferay Portal/DXP Account Settings Page elévation de privilègesInconnueNot DefinedOfficial Fix0.000430.04CVE-2024-26270
20/02/20245.35.2Liferay Portal/DXP Response Header elévation de privilègesInconnueNot DefinedOfficial Fix0.000430.02CVE-2024-26267
20/02/20244.64.5Liferay Portal/DXP Image Uploader Module dénie de serviceInconnueNot DefinedOfficial Fix0.000430.03CVE-2024-26265
20/02/20246.05.9Liferay Portal/DXP Java2WsddTask._format XML External EntityInconnueNot DefinedOfficial Fix0.000430.04CVE-2024-25606
20/02/20245.25.1Liferay Portal/DXP External URL HtmlUtil.escapeRedirectInconnueNot DefinedOfficial Fix0.000610.02CVE-2024-25608
20/02/20245.65.5Liferay Portal/DXP chiffrement faibleInconnueNot DefinedOfficial Fix0.000430.06CVE-2024-25607
20/02/20245.25.1Liferay Portal/DXP External URL HtmlUtil.escapeRedirectInconnueNot DefinedOfficial Fix0.000610.02CVE-2024-25609
20/02/20245.45.3Liferay Portal/DXP User/Organizations Section elévation de privilègesInconnueNot DefinedOfficial Fix0.000430.02CVE-2024-25604
20/02/20245.35.2Liferay Portal/DXP Journal Module elévation de privilègesInconnueNot DefinedOfficial Fix0.000430.04CVE-2024-25605

143 plus d'entrées ne sont pas affichées

Do you know our Splunk app?

Download it now for free!