Description

This alert was generated using only banner information. It may be a false positive.
You are using a vulnerable Liferay Portal. Several vulnerabilities were reported for this version of the Liferay Portal. Consult Web References for more information about the affected version and the vulnerabilities that were reported.

Remediation

Upgrade Liferay Portal to the latest version.

References

Liferay Portal 7.0.x vulnerabilities

Related Vulnerabilities

WordPress Plugin Similar Posts-Best Related Posts for WordPress Remote Code Execution (3.1.5)

WordPress Plugin AMP for WP-Accelerated Mobile Pages Multiple Unspecified Vulnerabilities (0.9.72)

WordPress Plugin WP Admin UI Customize Cross-Site Scripting (1.5.2.6)

Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-44309)

WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2019-17531)

Severity

Medium

Classification

CWE-918 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Code Execution Missing Update