Search for packages
| purl | pkg:maven/com.liferay.portal/release.dxp.bom@7.4.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-r5fj-j449-vqw2
Aliases: CVE-2022-42120 |
Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment Module A SQL injection vulnerability in the Fragment … |
Vulnerable |
|
GHSA-g6r2-6x46-jpp6
Aliases: CVE-2022-42117 |
Liferay Portal and Liferay DXP Vulnerable to XSS in the Frontend Taglib Module A Cross-site scripting (XSS) vulnerability in the … |
Vulnerable |
|
GHSA-7f7g-vhff-mjqj
Aliases: CVE-2022-42112 |
Liferay Portal and Liferay DXP Vulnerable to XSS via the Portal Search Module A Cross-site scripting (XSS) vulnerability in the … |
Vulnerable |
|
GHSA-67jp-27jj-6x85
Aliases: CVE-2022-42116 |
Liferay Portal and Liferay DXP Vulnerable to XSS in the CKEditor Integration with the Frontend Editor Module A Cross-site scripting … |
Vulnerable |
|
GHSA-cmrw-cgfc-v6x2
Aliases: CVE-2022-42114 |
Liferay Portal and Liferay DXP Vulnerable to XSS via the Role Module A Cross-site scripting (XSS) vulnerability in the Role … |
Vulnerable |
|
GHSA-43h9-p3j4-39hm
Aliases: CVE-2024-25607 |
Liferay Portal defaults to a low work factor for the default password hashing algorithm The default password hashing algorithm (PBKDF2-HMAC-SHA1) … |
Vulnerable |
|
GHSA-3qq5-wcrx-4h8r
Aliases: CVE-2024-25609 |
Liferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Two Forward Slashes HtmlUtil.escapeRedirect in Liferay Portal 7.2.0 through 7.4.3.12, … |
Vulnerable |
|
GHSA-2mvj-q2q3-wxjv
Aliases: CVE-2024-26267 |
Liferay Portal and Liferay DXP HTTP Header Can Expose Versions In Liferay Portal 7.2.0 through 7.4.3.25, and older unsupported versions, … |
Vulnerable |
|
GHSA-869h-qhfx-w939
Aliases: CVE-2024-25606 |
Liferay Portal has an XXE vulnerability in Java2WsddTask._format XXE vulnerability in Liferay Portal 7.2.0 through 7.4.3.7, and older unsupported versions, … |
Vulnerable |
|
GHSA-548x-j6x6-hcv4
Aliases: CVE-2024-25608 |
Liferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Replacement Character HtmlUtil.escapeRedirect in Liferay Portal 7.2.0 through 7.4.3.18, and … |
Vulnerable |
|
GHSA-qm43-g2xj-hvg5
Aliases: CVE-2024-26268 |
Liferay Portal and Liferay DXP User Enumeration Vulnerability User enumeration vulnerability in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported … |
Vulnerable |
|
GHSA-w275-m8cr-hf2v
Aliases: CVE-2024-25144 |
Liferay Portal denial-of-service vulnerability The IFrame widget in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versions, and Liferay DXP … |
Vulnerable |
|
GHSA-xq4r-4xfh-vch8
Aliases: CVE-2024-26270 |
Liferay Portal and Liferay DXP vulnerable to theft of hashed password The Account Settings page in Liferay Portal 7.4.3.76 through … | There are no reported fixed by versions. |
|
GHSA-vvpf-53qx-cxhh
Aliases: CVE-2024-25610 |
Liferay Portal has a Stored XSS with Blog entries (Insecure defaults) In Liferay Portal 7.2.0 through 7.4.3.12, and older unsupported … |
Vulnerable |
|
GHSA-9vgq-w5pv-v77q
Aliases: CVE-2024-25145 |
Liferay Portal stored cross-site scripting (XSS) vulnerability Stored cross-site scripting (XSS) vulnerability in the Portal Search module's Search Result app … | There are no reported fixed by versions. |
|
GHSA-qp68-5v39-r869
Aliases: CVE-2023-42627 |
Liferay Portal and Liferay DXP Vulnerable to XSS in the Commerce Module Multiple stored cross-site scripting (XSS) vulnerabilities in the … | There are no reported fixed by versions. |
|
GHSA-w2g3-j73q-7qv7
Aliases: CVE-2023-42497 |
Liferay Portal and Liferay DXP Vulnerable to Reflected XSS via the Export for Translation Page Reflected cross-site scripting (XSS) vulnerability … |
Vulnerable |
|
GHSA-g44j-f8wm-6622
Aliases: CVE-2023-42629 |
Liferay Portal and Liferay DXP Vulnerable to Stored XSS in the Manage Vocabulary Page Stored cross-site scripting (XSS) vulnerability in … |
Vulnerable |
|
GHSA-hv45-r2f5-fmhj
Aliases: CVE-2023-42628 |
Liferay Portal and Liferay DXP Vulnerable to XSS in the Wiki Widget Stored cross-site scripting (XSS) vulnerability in the Wiki … |
Vulnerable |
|
GHSA-j5gv-w838-mmcx
Aliases: CVE-2023-44310 |
Liferay Portal and Liferay DXP Vulnerable to XSS via the Page Tree Menu Stored cross-site scripting (XSS) vulnerability in Page … |
Vulnerable |
|
GHSA-j663-6jpj-xx8c
Aliases: CVE-2023-44309 |
Liferay Portal and Liferay DXP Vulnerable to XSS in the Fragment Components Multiple stored cross-site scripting (XSS) vulnerabilities in the … |
Vulnerable |