Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 437
Reset filtersLiferay Portal Self Cross-site scripting (XSS) vulnerability on the edit Knowledge Base article page
Liferay Portal and DXP do not properly restrict access to OpenAPI
Liferay Portal and DXP are Missing Authorization in Collection Provider
Liferay Portal and Liferay DXP vulnerable to reflected cross-site scripting (XSS)
Liferay Portal reflected cross-site scripting (XSS) vulnerability in the google_gaget
Liferay Portal fails to verify messages from the cluster network is trusted
Liferay has Incorrect Permission Assignment for Critical Resource
Liferay Commerce Order Content Web is Vulnerable to Authorization Bypass Through User-Controlled Key
Liferay is Vulnerable to Authorization Bypass Through User-Controlled Key
Liferay Mentions Web is Vulnerable to Cross-site Scripting
Liferay Account Admin Web vulnerable to Authorization Bypass Through User-Controlled Key
Liferay Publications vulnerable to Authorization Bypass Through User-Controlled Key
Liferay Publications is vulnerable to Incorrect Authorization
Liferay Portal is vulnerable to CSRF through publication comments
Liferay Portal is vulnerable to XSS through its workflow process builder
Liferay Portal's Membership page is vulnerable to XSS through “name“ text field
Liferay Portal Commerce is vulnerable to XSS through account "name" field
Liferay Portal is vulnerable to XSS through its Calendar Events parameters
Liferay Portal Commerce Shop is vulnerable to Stored XSS through SVG file
Liferay Portal is vulnerable to Stored XSS through Forms text type field
Liferay Portal Notifications Widget has multiple XSS vulnerabilities through various text fields
Liferay Portal is vulnerable to XSS through its Commerce Product's Name text field
Liferay Portal has multiple Stored XSS vulnerabilities on its View Order page
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.