CVE-2011-1571

EPSS 7.15%
Veröffentlicht 07.05.2011 19:55:01
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Liferay ≫ Liferay Portal SwEditioncommunity Version >= 5.1.0 <= 5.1.2

Liferay ≫ Liferay Portal SwEditioncommunity Version >= 6.0.0 <= 6.0.5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	7.15%	0.912

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

http://openwall.com/lists/oss-security/2011/03/29/1

Third Party Advisory

Mailing List

http://openwall.com/lists/oss-security/2011/04/08/5

Third Party Advisory

Mailing List

http://openwall.com/lists/oss-security/2011/04/11/9

Third Party Advisory

Mailing List

http://issues.liferay.com/secure/ReleaseNote.jspa?version=10656&styleName=Html&projectId=10952

Vendor Advisory

Release Notes

http://issues.liferay.com/browse/LPS-14726

Vendor Advisory

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2011-1571

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-1571

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-1571

EUVD