PT-2023-24579

Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.3.0 through 7.4.0 Liferay DXP 7.3 before update 14 Description A cross-site scripting XSS issue exists in the App Builder module's custom object details page, allowing remote attackers to inject arbitrary web script o...

Liferay Portal和Liferay DXP 跨站脚本漏洞

Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...

Liferay Portal和Liferay DXP 跨站脚本漏洞

Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...

Liferay Portal和Liferay DXP 安全漏洞

Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...

CVE-2022-38662

In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites...

CVE-2022-38653

In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded...

CVE-2022-38662

In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites...

CVE-2022-38653

In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded...

Code injection

In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites...

Cross site scripting

In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded...

HCL Digital Experience 输入验证错误漏洞

HCL Digital Experience is a suite of digital experience platforms, content delivery solutions from HCL India. HCL Digital Experience suffers from an input validation error vulnerability that stems from an attacker being able to construct URLs to redirect users to untrusted sites...

HCL Technologies HCL Digital Experience 跨站脚本漏洞

HCL Technologies HCL Digital Experience is a suite of digital experience platforms, content delivery solutions from HCL Technologies, USA. HCL Technologies HCL Digital Experience suffers from a security vulnerability that originates from an attacker being able to construct customized cross-site...

CVE-2022-38653 HCL Digital Experience is susceptible to cross-site scripting (XSS)

In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded...

CVE-2022-38653 HCL Digital Experience is susceptible to cross-site scripting (XSS)

In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded...

CVE-2022-38653

HCL Digital Experience is reported vulnerable to a cross-site scripting (XSS) issue where a customized payload can be served unencoded in the application. The CVE-2022-38653 entry lists a CVSS v3.1 base score of 5.4 (MEDIUM) with NETWORK attack vector, LOW impact on confidentiality/integrity and ...

CVE-2022-38662 HCL Digital Experience is susceptible to open redirects

In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites...

CVE-2022-38662 HCL Digital Experience is susceptible to open redirects

In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites...

CVE-2022-38662

In HCL Digital Experience, the CVE-2022-38662 issue is an open redirect vulnerability caused by URL construction that can redirect users to untrusted sites. Affected product: HCL Digital Experience (web/DX URL handling). Impact: potential user redirection to attacker-controlled or untrusted desti...

PT-2022-24503 · Hcl · Hcl Digital Experience

Name of the Vulnerable Software and Affected Versions: HCL Digital Experience affected versions not specified Description: The issue allows a customized XSS payload to be constructed and served in the application unencoded. Recommendations: At the moment, there is no information about a newer...

PT-2022-24512 · Hcl · Hcl Digital Experience

Name of the Vulnerable Software and Affected Versions: HCL Digital Experience affected versions not specified Description: The issue allows URLs to be constructed in a way that redirects users to untrusted sites. Recommendations: At the moment, there is no information about a newer version that...