CVE-2011-1571

EPSS 7.15%
Published 07.05.2011 19:55:01
Last modified 11.04.2025 00:51:21
Source secalert@redhat.com
Teams watchlist Login
Open Login

Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors.

Affected products Warnungen 0 Metrics 2 CWE 0 References 8

Data is provided by the National Vulnerability Database (NVD)

Liferay ≫ Liferay Portal SwEditioncommunity Version >= 5.1.0 <= 5.1.2

Liferay ≫ Liferay Portal SwEditioncommunity Version >= 6.0.0 <= 6.0.5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	7.15%	0.912

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

http://openwall.com/lists/oss-security/2011/03/29/1

Third Party Advisory

Mailing List

http://openwall.com/lists/oss-security/2011/04/08/5

Third Party Advisory

Mailing List

http://openwall.com/lists/oss-security/2011/04/11/9

Third Party Advisory

Mailing List

http://issues.liferay.com/secure/ReleaseNote.jspa?version=10656&styleName=Html&projectId=10952

Vendor Advisory

Release Notes

http://issues.liferay.com/browse/LPS-14726

Vendor Advisory

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2011-1571

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-1571

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-1571

EUVD