CVE-2024-25145
- EPSS 0.15%
- Veröffentlicht 07.02.2024 15:15:09
- Zuletzt bearbeitet 13.05.2025 18:17:51
Stored cross-site scripting (XSS) vulnerability in the Portal Search module's Search Result app in Liferay Portal 7.2.0 through 7.4.3.11, and older unsupported versions, and Liferay DXP 7.4 before update 8, 7.3 before update 4, 7.2 before fix pack 17...
CVE-2023-35030
- EPSS 0.57%
- Veröffentlicht 15.06.2023 05:15:09
- Zuletzt bearbeitet 21.11.2024 08:07:50
Cross-site request forgery (CSRF) vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.76, and Liferay DXP 7.4 update 70 through 76 allows remote attackers to execute arbitrary code in the scripting console ...
CVE-2023-35029
- EPSS 0.23%
- Veröffentlicht 15.06.2023 04:15:34
- Zuletzt bearbeitet 21.11.2024 08:07:50
Open redirect vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.76, and Liferay DXP 7.4 update 70 through 76 allows remote attackers to redirect users to arbitrary external URLs via the `_com_liferay_layo...
CVE-2023-3193
- EPSS 0.14%
- Veröffentlicht 15.06.2023 04:15:34
- Zuletzt bearbeitet 21.11.2024 08:16:39
Cross-site scripting (XSS) vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.73, and Liferay DXP 7.4 update 70 through 73 allows remote attackers to inject arbitrary web script or HTML via the `_com_lifer...
CVE-2022-42118
- EPSS 8.89%
- Veröffentlicht 15.11.2022 01:15:12
- Zuletzt bearbeitet 13.05.2025 18:17:51
A Cross-site scripting (XSS) vulnerability in the Portal Search module in Liferay Portal 7.1.0 through 7.4.2, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 15, and 7.3 before service pack 3 allows remote attackers to inject arbitrary we...
CVE-2022-42119
- EPSS 0.64%
- Veröffentlicht 15.11.2022 01:15:12
- Zuletzt bearbeitet 30.04.2025 15:15:55
Certain Liferay products are vulnerable to Cross Site Scripting (XSS) via the Commerce module. This affects Liferay Portal 7.3.5 through 7.4.2 and Liferay DXP 7.3 before update 8.
CVE-2022-42120
- EPSS 0.82%
- Veröffentlicht 15.11.2022 01:15:12
- Zuletzt bearbeitet 05.09.2025 18:15:36
A SQL injection vulnerability in the Fragment module in Liferay Portal 7.3.3 through 7.4.3.16, and Liferay DXP 7.3 before update 4, and 7.4 before update 17 allows attackers to execute arbitrary SQL commands via a PortletPreferences' `namespace` attr...
CVE-2022-42121
- EPSS 0.61%
- Veröffentlicht 15.11.2022 01:15:12
- Zuletzt bearbeitet 05.09.2025 18:15:36
A SQL injection vulnerability in the Layout module in Liferay Portal 7.1.3 through 7.4.3.4, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 17, 7.3 before service pack 3, and 7.4 GA allows remote authenticated attackers to execute arbitra...
CVE-2022-42122
- EPSS 0.82%
- Veröffentlicht 15.11.2022 01:15:12
- Zuletzt bearbeitet 05.09.2025 18:15:36
A SQL injection vulnerability in the Friendly Url module in Liferay Portal 7.3.7, and Liferay DXP 7.3 fix pack 2 through update 4 allows attackers to execute arbitrary SQL commands via a crafted payload injected into the `title` field of a friendly U...
CVE-2022-42111
- EPSS 0.18%
- Veröffentlicht 15.11.2022 01:15:10
- Zuletzt bearbeitet 13.05.2025 18:17:51
A Cross-site scripting (XSS) vulnerability in the Sharing module's user notification in Liferay Portal 7.2.1 through 7.4.2, and Liferay DXP 7.2 before fix pack 19, and 7.3 before update 4 allows remote attackers to inject arbitrary web script or HTML...