CVE-2022-45320

🗓️ 20 Feb 2024 00:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 8609 Views

Liferay Portal & DXP <7.4.3.16 & <7.2 FP19, <7.3 U6, <7.4 U16 allows owner chang

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-45320	20 Feb 202406:21	–	circl
CNNVD	Liferay Portal and Liferay DXP Security Vulnerabilities	20 Feb 202400:00	–	cnnvd
Cvelist	CVE-2022-45320	20 Feb 202400:00	–	cvelist
EUVD	EUVD-2022-48219	3 Oct 202520:07	–	euvd
Github Security Blog	Privilege escalation in Liferay Portal	20 Feb 202406:30	–	github
NVD	CVE-2022-45320	20 Feb 202405:15	–	nvd
OSV	CVE-2022-45320	20 Feb 202405:15	–	osv
OSV	GHSA-MC8M-4R3W-Q2HW Privilege escalation in Liferay Portal	20 Feb 202406:30	–	osv
Prion	Code injection	20 Feb 202405:15	–	prion
RedhatCVE	CVE-2022-45320	23 May 202500:51	–	redhatcve

NVD

Node

liferay digital_experience_platformRange<7.2

OR

liferay digital_experience_platformMatch7.2-

OR

liferay digital_experience_platformMatch7.2fix_pack_1

OR

liferay digital_experience_platformMatch7.2fix_pack_10

OR

liferay digital_experience_platformMatch7.2fix_pack_11

OR

liferay digital_experience_platformMatch7.2fix_pack_12

OR

liferay digital_experience_platformMatch7.2fix_pack_13

OR

liferay digital_experience_platformMatch7.2fix_pack_14

OR

liferay digital_experience_platformMatch7.2fix_pack_15

OR

liferay digital_experience_platformMatch7.2fix_pack_16

OR

liferay digital_experience_platformMatch7.2fix_pack_17

OR

liferay digital_experience_platformMatch7.2fix_pack_18

OR

liferay digital_experience_platformMatch7.2fix_pack_2

OR

liferay digital_experience_platformMatch7.2fix_pack_3

OR

liferay digital_experience_platformMatch7.2fix_pack_4

OR

liferay digital_experience_platformMatch7.2fix_pack_5

OR

liferay digital_experience_platformMatch7.2fix_pack_6

OR

liferay digital_experience_platformMatch7.2fix_pack_7

OR

liferay digital_experience_platformMatch7.2fix_pack_8

OR

liferay digital_experience_platformMatch7.2fix_pack_9

OR

liferay digital_experience_platformMatch7.2service_pack_1

OR

liferay digital_experience_platformMatch7.2service_pack_2

OR

liferay digital_experience_platformMatch7.2service_pack_3

OR

liferay digital_experience_platformMatch7.2service_pack_4

OR

liferay digital_experience_platformMatch7.2service_pack_5

OR

liferay digital_experience_platformMatch7.2service_pack_6

OR

liferay digital_experience_platformMatch7.2service_pack_7

OR

liferay digital_experience_platformMatch7.2service_pack_8

OR

liferay digital_experience_platformMatch7.3-

OR

liferay digital_experience_platformMatch7.3fix_pack_1

OR

liferay digital_experience_platformMatch7.3fix_pack_2

OR

liferay digital_experience_platformMatch7.3service_pack_1

OR

liferay digital_experience_platformMatch7.3service_pack_3

OR

liferay digital_experience_platformMatch7.3update4

OR

liferay digital_experience_platformMatch7.3update5

OR

liferay digital_experience_platformMatch7.4-

OR

liferay digital_experience_platformMatch7.4update1

OR

liferay digital_experience_platformMatch7.4update10

OR

liferay digital_experience_platformMatch7.4update11

OR

liferay digital_experience_platformMatch7.4update12

OR

liferay digital_experience_platformMatch7.4update13

OR

liferay digital_experience_platformMatch7.4update14

OR

liferay digital_experience_platformMatch7.4update15

OR

liferay digital_experience_platformMatch7.4update2

OR

liferay digital_experience_platformMatch7.4update3

OR

liferay digital_experience_platformMatch7.4update4

OR

liferay digital_experience_platformMatch7.4update5

OR

liferay digital_experience_platformMatch7.4update6

OR

liferay digital_experience_platformMatch7.4update7

OR

liferay digital_experience_platformMatch7.4update8

OR

liferay digital_experience_platformMatch7.4update9

OR

liferay liferay_portalRange<7.4.3.16

Source	Link
liferay	www.liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2022-45320

28 Mar 2025 21:15Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.3

EPSS0.00362

SSVC

cve-2022-45320 liferay portal liferay dxp remote authentication wiki page security vulnerability