Description

This alert was generated using only banner information. It may be a false positive.
You are using a vulnerable Liferay Portal. Several vulnerabilities were reported for this version of the Liferay Portal. Consult Web References for more information about the affected version and the vulnerabilities that were reported.

Remediation

Upgrade Liferay Portal to the latest version.

References

Liferay Portal 7.0.x vulnerabilities

Related Vulnerabilities

WordPress Ultimate Member Plugin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14945)

WordPress Plugin Google Authenticator-Per User Prompt Timing Attack (0.6)

Oracle Database Server CVE-2011-2244 Vulnerability (CVE-2011-2244)

WordPress Plugin Contact Form to DB by BestWebSoft-Messages Database For WordPress SQL Injection (1.7.2)

PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-5625)

Severity

Medium

Classification

CWE-918 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Code Execution Missing Update