Known vulnerabilities in Liferay Liferay DXP 7.3 update 4

Vendor: Liferay
Website:
Total Security Bulletins: 8

Security bulletins (8)

Secuity bulletin Severity Status Published
SB2024022224: Information disclosure in Liferay Portal and Liferay DXP Medium
Patched
22.02.2024
SB2024022130: XML External Entity injection in Liferay Portal and Liferay DXP Low
Patched
21.02.2024
SB2024022128: Information disclosure in Liferay Portal and Liferay DXP Medium
Patched
21.02.2024
SB2024022111: Cross-site scripting in Liferay Portal and Liferay DXP Low
Patched
21.02.2024
SB2024022109: Cross-site scripting in Liferay Portal and Liferay DXP Low
Patched
21.02.2024
SB2024022106: Cross-site scripting in Liferay Portal and Liferay DXP Low
Patched
21.02.2024
SB2024022008: Improper access control in Liferay Portal and Liferay DXP Medium
Patched
20.02.2024
SB2024022006: Privilege escalation in Liferay Portal and Liferay DXP Medium
Patched
20.02.2024