Lucene search
LiferayLiferay Portal7.2.0
2 matches found
CVE-2019-16891
Liferay Portal CE 6.2.5 allows remote command execution because of deserialization of a JSON payload.
9.8CVSS9.4AI score0.83825EPSS
CVE-2019-16147
Liferay Portal through 7.2.0 GA1 allows XSS via a journal article title to journal_article/page.jsp in journal/journal-taglib.
6.1CVSS5.8AI score0.0024EPSS