Liferay Sårbarheter

Tidslinje

Typ

Produkt

Liferay Portal149
Liferay DXP132
Liferay Enterprise Portal7
Liferay Liferay Portal3
Liferay CMS Portal1

Åtgärd

Official Fix112
Temporary Fix0
Workaround0
Unavailable0
Not Defined56

Utnyttjbarhet

High1
Functional0
Proof-of-Concept9
Unproven0
Not Defined158

Åtkomstvektor

Not Defined0
Physical0
Local0
Adjacent8
Network160

Autentisering

Not Defined0
High7
Low110
None51

Användarinteraktion

Not Defined0
Required108
None60

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤444
≤552
≤636
≤730
≤85
≤90
≤101

CVSSv3 Temp

≤10
≤20
≤32
≤444
≤552
≤638
≤727
≤84
≤91
≤100

VulDB

≤10
≤20
≤35
≤477
≤556
≤613
≤715
≤81
≤90
≤101

NVD

≤10
≤20
≤30
≤40
≤57
≤615
≤719
≤86
≤94
≤102

CNA

≤10
≤20
≤32
≤40
≤57
≤613
≤713
≤81
≤914
≤109

Säljare

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Utnyttja 0-dagars

<1k52
<2k103
<5k13
<10k0
<25k0
<50k0
<100k0
≥100k0

Utnyttja idag

<1k162
<2k6
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Utnyttja marknadsvolymen

🔴 CTI Aktiviteter

Affected Products (9): CMS Portal (1), DXP (132), Enterprise Portal (7), Liferay Enterprise Portal (1), Liferay Portal (3), Liferay Portal Enterprise (1), Portal (149), Portal CE (1), portal (1)

PubliceradBaseTempSårbarhetProdUtnRemEPSSCTICVE
21/02/20246.26.2Liferay Portal/DXP Document cross site scriptingOkändNot DefinedOfficial Fix0.000430.02CVE-2023-47795
21/02/20246.96.8Liferay Portal/DXP Javascript Style Link cross site scriptingOkändNot DefinedOfficial Fix0.000430.02CVE-2024-25147
21/02/20246.26.2Liferay Portal/DXP Users Admin Module cross site scriptingOkändNot DefinedOfficial Fix0.000430.02CVE-2024-25602
21/02/20246.26.2Liferay Portal/DXP Expando Module cross site scriptingOkändNot DefinedOfficial Fix0.000430.02CVE-2024-25601
21/02/20246.26.2Liferay Portal/DXP Instance Settings for Accounts cross site scriptingOkändNot DefinedOfficial Fix0.000430.02CVE-2023-40191
21/02/20244.44.4Liferay Portal/DXP Calendar Module cross site scriptingOkändNot DefinedOfficial Fix0.000430.02CVE-2024-25151
21/02/20246.26.2Liferay Portal/DXP Message Board Widget cross site scriptingOkändNot DefinedOfficial Fix0.000430.05CVE-2024-25152
21/02/20246.26.2Liferay Portal/DXP DDMForm cross site scriptingOkändNot DefinedOfficial Fix0.000430.02CVE-2024-25603
21/02/20246.96.8Liferay Portal/DXP Add Assignees to a Role Page cross site scriptingOkändNot DefinedOfficial Fix0.000430.04CVE-2023-42496
21/02/20246.26.2Liferay Portal/DXP cross site scriptingOkändNot DefinedOfficial Fix0.000430.02CVE-2024-26266
21/02/20246.96.8Liferay Portal/DXP portlet.js cross site scriptingOkändNot DefinedOfficial Fix0.000430.02CVE-2024-26269
21/02/20246.96.8Liferay Portal/DXP cross site scriptingOkändNot DefinedOfficial Fix0.000430.02CVE-2023-42498
21/02/20244.34.1Liferay DXP/Portal förfalskning på begäran över webbplatsenOkändNot DefinedOfficial Fix0.000430.02CVE-2021-29050
21/02/20243.13.0Liferay DXP/Portal Password Reminder Page informationsgivningOkändNot DefinedOfficial Fix0.000430.02CVE-2021-29038
20/02/20246.26.2Liferay Portal/DXP Entry Content Text cross site scriptingOkändNot DefinedOfficial Fix0.000430.03CVE-2024-25610
20/02/20244.54.4Liferay Portal/DXP informationsgivningOkändNot DefinedOfficial Fix0.000430.02CVE-2024-26268
20/02/20245.15.0Liferay Portal/DXP Account Settings Page privilegier eskaleringOkändNot DefinedOfficial Fix0.000430.04CVE-2024-26270
20/02/20245.35.2Liferay Portal/DXP Response Header privilegier eskaleringOkändNot DefinedOfficial Fix0.000430.02CVE-2024-26267
20/02/20244.64.5Liferay Portal/DXP Image Uploader Module förnekande av tjänstenOkändNot DefinedOfficial Fix0.000430.03CVE-2024-26265
20/02/20246.05.9Liferay Portal/DXP Java2WsddTask._format XML External EntityOkändNot DefinedOfficial Fix0.000430.04CVE-2024-25606
20/02/20245.25.1Liferay Portal/DXP External URL HtmlUtil.escapeRedirectOkändNot DefinedOfficial Fix0.000610.02CVE-2024-25608
20/02/20245.65.5Liferay Portal/DXP svag krypteringOkändNot DefinedOfficial Fix0.000430.06CVE-2024-25607
20/02/20245.25.1Liferay Portal/DXP External URL HtmlUtil.escapeRedirectOkändNot DefinedOfficial Fix0.000610.02CVE-2024-25609
20/02/20245.45.3Liferay Portal/DXP User/Organizations Section privilegier eskaleringOkändNot DefinedOfficial Fix0.000430.02CVE-2024-25604
20/02/20245.35.2Liferay Portal/DXP Journal Module privilegier eskaleringOkändNot DefinedOfficial Fix0.000430.04CVE-2024-25605

143 fler poster visas inte

Want to stay up to date on a daily basis?

Enable the mail alert feature now!