Lucene search
Veracode Vulnerability DatabaseVERACODE:13529HistoryMar 25, 2019 - 8:40 a.m.
Remote Code Execution (RCE)
2019-03-2508:40:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.01 Low
EPSS
Percentile
83.7%
Liferay portal is vulnerable to remote code execution (RCE). Remote attackers are able to execute arbitrary commands through the XSL Content portlet via unknown vectors.
| CPE | Name | Operator | Version |
|---|---|---|---|
| liferay portal client | le | 6.0.5 | |
| liferay portal service | le | 6.0.5 |
References
issues.liferay.com/browse/LPS-14726
issues.liferay.com/secure/ReleaseNote.jspa?version=10656&styleName=Html&projectId=10952
openwall.com/lists/oss-security/2011/03/29/1
openwall.com/lists/oss-security/2011/04/08/5
openwall.com/lists/oss-security/2011/04/11/9
issues.liferay.com/browse/LPS-14726
issues.liferay.com/secure/ReleaseNote.jspa?version=10656&styleName=Html&projectId=10952
Related
cve
cve
CVE-2011-1571
2022-10-03 16:15:10
CVE-2011-1501
2022-10-03 16:15:08
nvd
nvd
CVE-2011-1571
2011-05-07 19:55:01
CVE-2011-1501
2011-05-06 16:38:29
cvelist
cvelist
CVE-2011-1571
2022-10-03 16:15:10
prion
prion
Code injection
2011-05-07 19:55:00
packetstorm
packetstorm
Liferay XSL Command Execution
2012-04-07 00:00:00
nessus
nessus
Liferay Portal < 6.0.6 Multiple Vulnerabilities
2012-05-22 00:00:00