Lucene search
Veracode Vulnerability DatabaseVERACODE:13507HistoryMar 25, 2019 - 8:40 a.m.
XML External Entity (XXE)
2019-03-2508:40:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.002 Low
EPSS
Percentile
51.5%
liferay portal is vulnerable to XML external entity (XXE) attacks. A remote authenticated user is able to exploit the vulnerability to read arbitrary files via an entity declaration in conjunction with an entity reference.
| CPE | Name | Operator | Version |
|---|---|---|---|
| liferay portal impl | le | 6.0.5 |
Related
nvd
nvd
CVE-2011-1502
2011-05-07 19:55:00
cvelist
cvelist
CVE-2011-1502
2022-10-03 16:15:10
cve
cve
CVE-2011-1502
2022-10-03 16:15:10
prion
prion
Design/Logic Flaw
2011-05-07 19:55:00
nessus
nessus
Liferay Portal < 6.0.6 Multiple Vulnerabilities
2012-05-22 00:00:00