Medium
CVE-2022-42113
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 125
Reset filters
Medium
CVE-2022-28979
Liferay Portal and Liferay DXP Vulnerable to XSS in the Portal Search Module
Medium
CVE-2022-28980
Liferay Portal and Liferay DXP Vulnerable to XSS via the filter_ Prefix
Medium
CVE-2022-38512
Liferay Portal and Liferay DXP Fails to Check Permissions in Translation Module
Medium
CVE-2022-28978
Liferay Portal and Liferay DXP Vulnerable to XSS in the Site Module
Medium
CVE-2022-28977
Liferay Portal and Liferay DXP HtmlUtil.escapeRedirect Can Be Circumvented
High
CVE-2021-33322
Liferay Portal and Liferay DXP fails to invalidate password reset tokens after use
Medium
CVE-2021-29049
Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via the currentURL Parameter
High
CVE-2021-33335
Liferay Portal and Liferay DXP Has Company Administrator Accounts Vulnerable to Takeovers
High
CVE-2021-33338
Liferay Portal Layout Module and Liferay DXP Exposes the Cross-Site Request Forgery (CSRF) Token in URLs
Medium
CVE-2021-33339
Liferay Portal Fragment Module and Liferay DXP Vulnerable to Cross-Site Scripting
Medium
CVE-2021-33336
Liferay Portal Journal Module and Liferay DXP Vulnerable to Cross-Site Scripting (XSS)
Medium
CVE-2021-33337
Liferay Portal and Liferay DXP Cross-site scripting (XSS) vulnerability in the Document Library module
Medium
CVE-2021-33326
Liferay Portal and Liferay DXP Cross-site scripting (XSS) vulnerability in the Frontend JS module
Medium
CVE-2021-33320
Liferay Portal and Liferay DXP vulnerable to email spam via lack of flagging rate
Medium
CVE-2021-33327
Liferay Portal and Liferay DXP does not properly check user permission
High
CVE-2021-33323
Liferay Portal and Liferay DXP autosaves form data for other users to see
Medium
CVE-2021-33324
Liferay Portal and Liferay DXP Don't Check Permissions of Pages
Medium
CVE-2021-33328
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in Edit Vocabulary Page
Medium
CVE-2021-33325
Liferay Portal and Liferay DXP Stores User Passwords in Cleartext
Medium
CVE-2021-33333
Liferay Portal and Liferay DXP Fails to Check User Permissions for Workflow Submissions
Medium
CVE-2021-33332
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS)
Medium
CVE-2021-33331
Liferay Portal and Liferay DXP Allows Arbitrary Redirect of Users to External URLs
Medium
CVE-2021-33334
Liferay Portal and Liferay DXP Fails to Properly Check User Permissions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.