Description XSS exists in Liferay Portal before 7.0 CE GA4(7.0.3) via a login name, password, or e-mail address. Remediation References CVE-2017-12646 Related Vulnerabilities Java Code Execution Vulnerability (CVE-2018-3211) Oracle Database Server CVE-2023-22052 Vulnerability (CVE-2023-22052) Python Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-1015) MySQL CVE-2015-0499 Vulnerability (CVE-2015-0499) IBMHttpServer Other Vulnerability (CVE-2004-0493) Severity Medium Classification CVE-2017-12646 CWE-707 Tags Missing Update Known Vulnerabilities