DX
Product
DXP
243
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 31Medium 204Low 3
Watch
Add DXP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-33947 | 4.3 | May 24 | The Object module in Liferay Portal 7.4.3.4 through 7.4.3.60, and Liferay DXP 7.4 before update 61 does not segment object definition by virtual instance in search which allows… Affected: 7.4.13 through 7.4.13.u60 |
| CVE-2023-33946 | 4.3 | May 24 | The Object module in Liferay Portal 7.4.3.4 through 7.4.3.48, and Liferay DXP 7.4 before update 49 does properly isolate objects in difference virtual instances, which allows… Affected: 7.4.13 through 7.4.13.u48 |
| CVE-2022-39975 | 4.3 | Sep 21 | The Layout module in Liferay Portal v7.3.3 through v7.4.3.34, and Liferay DXP 7.3 before update 10, and 7.4 before update 35 does not check user permission before showing the… Affected: 7.3; 7.3; 7.3; 7.3; 7.3; 7.3; +34 more |
| CVE-2021-29052 | 4.3 | May 17 | The Data Engine module in Liferay Portal 7.3.0 through 7.3.5, and Liferay DXP 7.3 before fix pack 1 does not check permissions in… Affected: 7.3 |