Description

This alert was generated using only banner information. It may be a false positive.
You are using a vulnerable Liferay Portal. A lot of vulnerabilities were reported for this version of the Liferay Portal. Consult Web References for more information about the affected version and the vulnerabilities that were reported.

Remediation

Upgrade Liferay Portal to the latest version.

References

Liferay Portal 6.x vulnerabilities

Related Vulnerabilities

Grafana Externally Controlled Reference to a Resource in Another Sphere Vulnerability (CVE-2021-41244)

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-6379)

Sqlite Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2023-7104)

Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-42497)

WordPress Plugin WooCommerce Extra Product Options Multiple Vulnerabilities (4.5.3)

Severity

High

Classification

CWE-502 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Code Execution Missing Update