Liferay

Records340All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical29CVSS 9.0–10.0

CVSS high43CVSS 7.0–8.9

Exploited now

Liferay records in CISA KEV

TI-2020-06440 Liferay Portal Deserialization of Untrusted Data Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Liferay Portal 319 records CRITICAL Digital Experience Platform 264 records MEDIUM Dxp 39 records MEDIUM Liferay Enterprise Portal 9 records LOW Portal 2 records LOW Liferay 1 record MEDIUM Liferay Portal Enterprise 1 record LOW

Records

1 record in Liferay Portal Enterprise · all components

TI-2005-04143 CVE-2005-4400 · GHSA-6gjw-jvjh-pv8x

Cross-site scripting (XSS) vulnerability in downloads/portal_ent in Liferay Portal…

LOW 24

Cross-site scripting (XSS) vulnerability in downloads/portal_ent in Liferay Portal Enterprise 3.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) _77_struts_action, (2) p_p_mode,…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01748 Published 2005-12-20 No fix listed

Open these records in search →

Critical	29
High	43
Medium	254
Low	14
No CVSS	0