Search for packages
| purl | pkg:maven/com.liferay.portal/release.dxp.bom@7.0.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-f43m-hhj4-q3jg
Aliases: CVE-2022-42132 |
Liferay Portal and Liferay DXP Includes LDAP Credentials in the Page URL The Test LDAP Users functionality in Liferay Portal … | There are no reported fixed by versions. |
|
GHSA-w7f2-6896-6mm2
Aliases: CVE-2022-26596 |
Liferay Portal and Liferay DXP allows arbitrary injection via web content template names Cross-site scripting (XSS) vulnerability in Journal module's … |
Vulnerable |
|
GHSA-mg3r-9jh8-33r9
Aliases: CVE-2020-15842 |
Liferay Portal and Liferay DXP have Insecure Deserialization Vulnerability Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack … |
Vulnerable |
|
GHSA-v377-8f8f-532h
Aliases: CVE-2020-13445 |
Liferay Portal and Liferay DXP Vulnerable to Arbitrary Code Execution In Liferay Portal before 7.3.2 and Liferay DXP 7.0 before … |
Vulnerable |
|
GHSA-hgjv-7wjr-qwqp
Aliases: CVE-2021-33326 |
Liferay Portal and Liferay DXP Cross-site scripting (XSS) vulnerability in the Frontend JS module Cross-site scripting (XSS) vulnerability in the … | There are no reported fixed by versions. |
|
GHSA-8j5r-9687-88w5
Aliases: CVE-2020-13444 |
Liferay Portal and Liferay DXP Fails to Sanitize API Data Liferay Portal 7.x before 7.3.2, and Liferay DXP 7.0 before … |
Vulnerable |
|
GHSA-wg4x-hf94-fj5v
Aliases: CVE-2021-33320 |
Liferay Portal and Liferay DXP vulnerable to email spam via lack of flagging rate The Flags module before version 5.0.11 … | There are no reported fixed by versions. |
|
GHSA-773f-f929-qgjj
Aliases: CVE-2020-15841 |
Liferay Portal and Liferay DXP Potentially Reveal LDAP Server Password via Unsafe Connection Liferay Portal before 7.3.0, and Liferay DXP … |
Vulnerable |
|
GHSA-vwj8-4grf-3r8v
Aliases: CVE-2021-33322 |
Liferay Portal and Liferay DXP fails to invalidate password reset tokens after use In implementation for the portal services before … | There are no reported fixed by versions. |
|
GHSA-f855-2rvm-5j7h
Aliases: CVE-2021-38268 |
Liferay Portal and Liferay DXP has incorrect default permissions for site members The Dynamic Data Mapping module before 4.0.39 from … |
Vulnerable |
|
GHSA-7m65-hmvg-rxpc
Aliases: CVE-2022-28978 |
Liferay Portal and Liferay DXP Vulnerable to XSS in the Site Module Stored cross-site scripting (XSS) vulnerability in the Site … |
Vulnerable |