Veracode Vulnerability DatabaseVERACODE:45412Cross Site Scripting (XSS)
9.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
6.5 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
18.1%
com.liferay.portal:release.portal.bom and com.liferay.portal:release.dxp.bom are vulnerable to Cross Site Scripting (XSS). The vulnerability is due to lack of user input validation within the search functionality if highlighting is disabled by adding any searchable content to the application.
Related
9.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
6.5 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
18.1%