Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Reflected Cross-Site Scripting (Reflected XSS)

🗓️ 23 Dec 2024 09:32:04Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 13 Views

Liferay Portal is vulnerable to reflected cross-site scripting due to improper user input handling.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Circl		CVE-2024-11993
17 Dec 202420:25
–circl
CNNVD		Liferay Portal和Liferay DXP 跨站脚本漏洞
17 Dec 202400:00
–cnnvd
CVE		CVE-2024-11993
17 Dec 202420:24
–cve
Cvelist		CVE-2024-11993
17 Dec 202420:24
–cvelist
EUVD		EUVD-2024-3536
3 Oct 202520:07
–euvd
Github Security Blog		Liferay Portal and Liferay DXP vulnerable to Cross-site Scripting
17 Dec 202421:30
–github
NVD		CVE-2024-11993
17 Dec 202421:15
–nvd
OSV		CVE-2024-11993
17 Dec 202421:15
–osv
OSV		GHSA-4HXR-28MV-Q729 Liferay Portal and Liferay DXP vulnerable to Cross-site Scripting
17 Dec 202421:30
–osv
Positive Technologies		PT-2024-17388 · Liferay · Liferay Dxp +1
17 Dec 202400:00
–ptsecurity
Rows per page
Vulners
Node
liferayrelease.dxp.bomRange7.1.10.fp1–7.4.13.u38java
OR
liferayrelease.dxp.bomMatch7.1.10java
OR
liferayrelease.dxp.bomMatch7.1.10.1java
OR
liferayrelease.dxp.bomMatch7.1.10.3java
OR
liferayrelease.dxp.bomMatch7.1.10.4java
OR
liferayrelease.dxp.bomMatch7.1.10.5java
OR
liferayrelease.dxp.bomMatch7.1.10.6java
OR
liferayrelease.dxp.bomMatch7.1.10.7java
OR
liferayrelease.dxp.bomMatch7.1.10.8java
OR
liferayrelease.dxp.bomMatch7.1.10.fp1java
OR
liferayrelease.dxp.bomMatch7.1.10.fp10java
OR
liferayrelease.dxp.bomMatch7.1.10.fp11java
OR
liferayrelease.dxp.bomMatch7.1.10.fp12java
OR
liferayrelease.dxp.bomMatch7.1.10.fp13java
OR
liferayrelease.dxp.bomMatch7.1.10.fp14java
OR
liferayrelease.dxp.bomMatch7.1.10.fp15java
OR
liferayrelease.dxp.bomMatch7.1.10.fp16java
OR
liferayrelease.dxp.bomMatch7.1.10.fp17java
OR
liferayrelease.dxp.bomMatch7.1.10.fp18java
OR
liferayrelease.dxp.bomMatch7.1.10.fp19java
OR
liferayrelease.dxp.bomMatch7.1.10.fp2java
OR
liferayrelease.dxp.bomMatch7.1.10.fp20java
OR
liferayrelease.dxp.bomMatch7.1.10.fp22java
OR
liferayrelease.dxp.bomMatch7.1.10.fp24java
OR
liferayrelease.dxp.bomMatch7.1.10.fp25java
OR
liferayrelease.dxp.bomMatch7.1.10.fp26java
OR
liferayrelease.dxp.bomMatch7.1.10.fp27java
OR
liferayrelease.dxp.bomMatch7.1.10.fp28java
OR
liferayrelease.dxp.bomMatch7.1.10.fp3java
OR
liferayrelease.dxp.bomMatch7.1.10.fp4java
OR
liferayrelease.dxp.bomMatch7.1.10.fp5java
OR
liferayrelease.dxp.bomMatch7.1.10.fp6java
OR
liferayrelease.dxp.bomMatch7.1.10.fp7java
OR
liferayrelease.dxp.bomMatch7.1.10.fp8java
OR
liferayrelease.dxp.bomMatch7.1.10.fp9java
OR
liferayrelease.dxp.bomMatch7.2.1java
OR
liferayrelease.dxp.bomMatch7.2.10java
OR
liferayrelease.dxp.bomMatch7.2.10.1java
OR
liferayrelease.dxp.bomMatch7.2.10.2java
OR
liferayrelease.dxp.bomMatch7.2.10.3java
OR
liferayrelease.dxp.bomMatch7.2.10.3-1java
OR
liferayrelease.dxp.bomMatch7.2.10.4java
OR
liferayrelease.dxp.bomMatch7.2.10.4-1java
OR
liferayrelease.dxp.bomMatch7.2.10.5java
OR
liferayrelease.dxp.bomMatch7.2.10.5-1java
OR
liferayrelease.dxp.bomMatch7.2.10.6java
OR
liferayrelease.dxp.bomMatch7.2.10.7java
OR
liferayrelease.dxp.bomMatch7.2.10.8java
OR
liferayrelease.dxp.bomMatch7.2.10.fp1java
OR
liferayrelease.dxp.bomMatch7.2.10.fp1-1java
OR
liferayrelease.dxp.bomMatch7.2.10.fp10java
OR
liferayrelease.dxp.bomMatch7.2.10.fp11java
OR
liferayrelease.dxp.bomMatch7.2.10.fp12java
OR
liferayrelease.dxp.bomMatch7.2.10.fp13java
OR
liferayrelease.dxp.bomMatch7.2.10.fp14java
OR
liferayrelease.dxp.bomMatch7.2.10.fp15java
OR
liferayrelease.dxp.bomMatch7.2.10.fp16java
OR
liferayrelease.dxp.bomMatch7.2.10.fp17java
OR
liferayrelease.dxp.bomMatch7.2.10.fp18java
OR
liferayrelease.dxp.bomMatch7.2.10.fp19java
OR
liferayrelease.dxp.bomMatch7.2.10.fp2java
OR
liferayrelease.dxp.bomMatch7.2.10.fp20java
OR
liferayrelease.dxp.bomMatch7.2.10.fp3java
OR
liferayrelease.dxp.bomMatch7.2.10.fp4java
OR
liferayrelease.dxp.bomMatch7.2.10.fp5java
OR
liferayrelease.dxp.bomMatch7.2.10.fp6java
OR
liferayrelease.dxp.bomMatch7.2.10.fp7java
OR
liferayrelease.dxp.bomMatch7.2.10.fp8java
OR
liferayrelease.dxp.bomMatch7.2.10.fp9java
OR
liferayrelease.dxp.bomMatch7.3.10java
OR
liferayrelease.dxp.bomMatch7.3.10.0-2java
OR
liferayrelease.dxp.bomMatch7.3.10.1java
OR
liferayrelease.dxp.bomMatch7.3.10.3java
OR
liferayrelease.dxp.bomMatch7.3.10.ep3java
OR
liferayrelease.dxp.bomMatch7.3.10.ep4java
OR
liferayrelease.dxp.bomMatch7.3.10.ep5java
OR
liferayrelease.dxp.bomMatch7.3.10.fp1java
OR
liferayrelease.dxp.bomMatch7.3.10.fp2java
OR
liferayrelease.dxp.bomMatch7.3.10.u10java
OR
liferayrelease.dxp.bomMatch7.3.10.u11java
OR
liferayrelease.dxp.bomMatch7.3.10.u12java
OR
liferayrelease.dxp.bomMatch7.3.10.u13java
OR
liferayrelease.dxp.bomMatch7.3.10.u14java
OR
liferayrelease.dxp.bomMatch7.3.10.u15java
OR
liferayrelease.dxp.bomMatch7.3.10.u16java
OR
liferayrelease.dxp.bomMatch7.3.10.u17java
OR
liferayrelease.dxp.bomMatch7.3.10.u18java
OR
liferayrelease.dxp.bomMatch7.3.10.u19java
OR
liferayrelease.dxp.bomMatch7.3.10.u19-1java
OR
liferayrelease.dxp.bomMatch7.3.10.u20java
OR
liferayrelease.dxp.bomMatch7.3.10.u20-1java
OR
liferayrelease.dxp.bomMatch7.3.10.u21java
OR
liferayrelease.dxp.bomMatch7.3.10.u21-1java
OR
liferayrelease.dxp.bomMatch7.3.10.u22java
OR
liferayrelease.dxp.bomMatch7.3.10.u22-1java
OR
liferayrelease.dxp.bomMatch7.3.10.u23java
OR
liferayrelease.dxp.bomMatch7.3.10.u24java
OR
liferayrelease.dxp.bomMatch7.3.10.u25java
OR
liferayrelease.dxp.bomMatch7.3.10.u26java
OR
liferayrelease.dxp.bomMatch7.3.10.u27java
OR
liferayrelease.dxp.bomMatch7.3.10.u28java
OR
liferayrelease.dxp.bomMatch7.3.10.u29java
OR
liferayrelease.dxp.bomMatch7.3.10.u30java
OR
liferayrelease.dxp.bomMatch7.3.10.u31java
OR
liferayrelease.dxp.bomMatch7.3.10.u32java
OR
liferayrelease.dxp.bomMatch7.3.10.u33java
OR
liferayrelease.dxp.bomMatch7.3.10.u34java
OR
liferayrelease.dxp.bomMatch7.3.10.u35java
OR
liferayrelease.dxp.bomMatch7.3.10.u36java
OR
liferayrelease.dxp.bomMatch7.3.10.u4java
OR
liferayrelease.dxp.bomMatch7.3.10.u5java
OR
liferayrelease.dxp.bomMatch7.3.10.u6java
OR
liferayrelease.dxp.bomMatch7.3.10.u7java
OR
liferayrelease.dxp.bomMatch7.3.10.u8java
OR
liferayrelease.dxp.bomMatch7.3.10.u9java
OR
liferayrelease.dxp.bomMatch7.4.10.ep1java
OR
liferayrelease.dxp.bomMatch7.4.11java
OR
liferayrelease.dxp.bomMatch7.4.12java
OR
liferayrelease.dxp.bomMatch7.4.13java
OR
liferayrelease.dxp.bomMatch7.4.13.u1java
OR
liferayrelease.dxp.bomMatch7.4.13.u10java
OR
liferayrelease.dxp.bomMatch7.4.13.u15java
OR
liferayrelease.dxp.bomMatch7.4.13.u16java
OR
liferayrelease.dxp.bomMatch7.4.13.u17java
OR
liferayrelease.dxp.bomMatch7.4.13.u18java
OR
liferayrelease.dxp.bomMatch7.4.13.u19java
OR
liferayrelease.dxp.bomMatch7.4.13.u2java
OR
liferayrelease.dxp.bomMatch7.4.13.u20java
OR
liferayrelease.dxp.bomMatch7.4.13.u21java
OR
liferayrelease.dxp.bomMatch7.4.13.u22java
OR
liferayrelease.dxp.bomMatch7.4.13.u23java
OR
liferayrelease.dxp.bomMatch7.4.13.u24java
OR
liferayrelease.dxp.bomMatch7.4.13.u25java
OR
liferayrelease.dxp.bomMatch7.4.13.u26java
OR
liferayrelease.dxp.bomMatch7.4.13.u27java
OR
liferayrelease.dxp.bomMatch7.4.13.u28java
OR
liferayrelease.dxp.bomMatch7.4.13.u29java
OR
liferayrelease.dxp.bomMatch7.4.13.u3java
OR
liferayrelease.dxp.bomMatch7.4.13.u30java
OR
liferayrelease.dxp.bomMatch7.4.13.u31java
OR
liferayrelease.dxp.bomMatch7.4.13.u32java
OR
liferayrelease.dxp.bomMatch7.4.13.u33java
OR
liferayrelease.dxp.bomMatch7.4.13.u34java
OR
liferayrelease.dxp.bomMatch7.4.13.u35java
OR
liferayrelease.dxp.bomMatch7.4.13.u36java
OR
liferayrelease.dxp.bomMatch7.4.13.u37java
OR
liferayrelease.dxp.bomMatch7.4.13.u4java
OR
liferayrelease.dxp.bomMatch7.4.13.u5java
OR
liferayrelease.dxp.bomMatch7.4.13.u6java
OR
liferayrelease.dxp.bomMatch7.4.13.u7java
OR
liferayrelease.dxp.bomMatch7.4.13.u8java
OR
liferayrelease.dxp.bomMatch7.4.13.u9java
OR
liferayrelease.portal.bomRange7.1.0–7.4.3.38java
OR
liferayrelease.portal.bomMatch7.1.0java
OR
liferayrelease.portal.bomMatch7.1.1java
OR
liferayrelease.portal.bomMatch7.1.2java
OR
liferayrelease.portal.bomMatch7.1.3java
OR
liferayrelease.portal.bomMatch7.1.3-1java
OR
liferayrelease.portal.bomMatch7.2.0java
OR
liferayrelease.portal.bomMatch7.2.1java
OR
liferayrelease.portal.bomMatch7.2.1-1java
OR
liferayrelease.portal.bomMatch7.3.0java
OR
liferayrelease.portal.bomMatch7.3.0-1java
OR
liferayrelease.portal.bomMatch7.3.1java
OR
liferayrelease.portal.bomMatch7.3.1-1java
OR
liferayrelease.portal.bomMatch7.3.2java
OR
liferayrelease.portal.bomMatch7.3.2-1java
OR
liferayrelease.portal.bomMatch7.3.3java
OR
liferayrelease.portal.bomMatch7.3.3-1java
OR
liferayrelease.portal.bomMatch7.3.4java
OR
liferayrelease.portal.bomMatch7.3.5java
OR
liferayrelease.portal.bomMatch7.3.6java
OR
liferayrelease.portal.bomMatch7.3.7java
OR
liferayrelease.portal.bomMatch7.4.0java
OR
liferayrelease.portal.bomMatch7.4.1java
OR
liferayrelease.portal.bomMatch7.4.1-1java
OR
liferayrelease.portal.bomMatch7.4.2java
OR
liferayrelease.portal.bomMatch7.4.2-1java
OR
liferayrelease.portal.bomMatch7.4.3.10java
OR
liferayrelease.portal.bomMatch7.4.3.11java
OR
liferayrelease.portal.bomMatch7.4.3.12java
OR
liferayrelease.portal.bomMatch7.4.3.13java
OR
liferayrelease.portal.bomMatch7.4.3.14java
OR
liferayrelease.portal.bomMatch7.4.3.15java
OR
liferayrelease.portal.bomMatch7.4.3.16java
OR
liferayrelease.portal.bomMatch7.4.3.17java
OR
liferayrelease.portal.bomMatch7.4.3.18java
OR
liferayrelease.portal.bomMatch7.4.3.19java
OR
liferayrelease.portal.bomMatch7.4.3.20java
OR
liferayrelease.portal.bomMatch7.4.3.20-ga20java
OR
liferayrelease.portal.bomMatch7.4.3.21java
OR
liferayrelease.portal.bomMatch7.4.3.21-ga21java
OR
liferayrelease.portal.bomMatch7.4.3.22java
OR
liferayrelease.portal.bomMatch7.4.3.23java
OR
liferayrelease.portal.bomMatch7.4.3.24java
OR
liferayrelease.portal.bomMatch7.4.3.25java
OR
liferayrelease.portal.bomMatch7.4.3.26java
OR
liferayrelease.portal.bomMatch7.4.3.27java
OR
liferayrelease.portal.bomMatch7.4.3.28java
OR
liferayrelease.portal.bomMatch7.4.3.29java
OR
liferayrelease.portal.bomMatch7.4.3.30java
OR
liferayrelease.portal.bomMatch7.4.3.31java
OR
liferayrelease.portal.bomMatch7.4.3.32java
OR
liferayrelease.portal.bomMatch7.4.3.33java
OR
liferayrelease.portal.bomMatch7.4.3.34java
OR
liferayrelease.portal.bomMatch7.4.3.35java
OR
liferayrelease.portal.bomMatch7.4.3.36java
OR
liferayrelease.portal.bomMatch7.4.3.37java
OR
liferayrelease.portal.bomMatch7.4.3.4java
OR
liferayrelease.portal.bomMatch7.4.3.5java
OR
liferayrelease.portal.bomMatch7.4.3.6java
OR
liferayrelease.portal.bomMatch7.4.3.7java
OR
liferayrelease.portal.bomMatch7.4.3.8java
OR
liferayrelease.portal.bomMatch7.4.3.9java

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
13 Dec 2025 04:25Current
6.6Medium risk
Vulners AI Score6.6
CVSS 3.16.1
CVSS 44.6
EPSS0.00175
SSVC
liferay portalreflected cross-site scriptinguser input handlingweb script vulnerability.
13