com.liferay.portal:release.portal.bom vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2017-12647Mediumcom.liferay.portal:release.portal.bom: Liferay Portal Vulnerable to XSS via a Knowledge Base Article TitleCVE-2017-12646Mediumcom.liferay.portal:release.portal.bom: Liferay Portal XSS Vulnerability CVE-2017-12645Mediumcom.liferay.portal:release.portal.bom: Liferay Portal Vulnerable to XSS via an Invalid portletIdCVE-2016-10404Mediumcom.liferay.portal:release.portal.bom: Liferay Portal Vulnerable to XSS via a Crafted Redirect FieldCVE-2017-12649Mediumcom.liferay.portal:release.portal.bom: Liferay Portal Vulnerable to XSS via Mishandled Title or Summary in the Web Content DisplayCVE-2017-1000425Mediumcom.liferay.portal:release.portal.bom: Liferay Portal XSS vulnerability via movie parameter in the /html/portal/flash.jsp pageCVE-2022-26595Mediumcom.liferay.portal:release.portal.bom: Liferay Portal and Liferay DXP fails to check permissions to view sites/groupsCVE-2021-38267Mediumcom.liferay.portal:release.portal.bom: Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in edit blog entry pageCVE-2020-24554Highcom.liferay.portal:release.portal.bom: Open Redirect in Liferay Portal

Stop the waste.
Protect your environment with Kodem.