Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 125
Reset filtersLiferay Portal and Liferay DXP Vulnerable to XSS in the Commerce Module
Liferay Portal and Liferay DXP Vulnerable to XSS in the Wiki Widget
Liferay Portal and Liferay DXP Vulnerable to XSS via the OAuth2ProviderApplicationRedirect Class
Liferay Portal and Liferay DXP Vulnerable to XSS via the Page Tree Menu
Liferay Portal and Liferay DXP Vulnerable to XSS in the Fragment Components
Liferay Portal and Liferay DXP Vulnerable to Stored XSS in the Manage Vocabulary Page
Liferay Portal and Liferay DXP Vulnerable to Reflected XSS via the Export for Translation Page
Liferay Portal and Liferay DXP Organization Selector Does Not Check User Permissions
Liferay Portal and Liferay DXP Vulnerable to Open Redirect via the Layout Module
Liferay Portal and Liferay DXP Vulnerable to CSRF via the Layout Module
Liferay Portal and Liferay DXP Vulnerable to XSS via the Layout Module
Liferay Portal and Liferay DXP Vulnerable to SQL Injection via Friendly URL Module
Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment Module
Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Layout Module
Liferay Portal and Liferay DXP Vulnerable to XSS via the Commerce Module
Liferay Portal and Liferay DXP Vulnerable to XSS via the Portal Search Module
Liferay Portal and Liferay DXP Vulnerable to XSS via the Sharing Module
Liferay Portal and Liferay DXP Vulnerable to XSS via the Announcements Module
Liferay Portal and Liferay DXP Includes LDAP Credentials in the Page URL
Liferay Portal and Liferay DXP Vulnerable to XSS in the Frontend Taglib Module
Liferay Portal and Liferay DXP Vulnerable to XSS in the CKEditor Integration with the Frontend Editor Module
Liferay Portal and Liferay DXP Vulnerable to XSS via the Portal Search Module
Liferay Portal and Liferay DXP Vulnerable to XSS via the Role Module
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.