Approved changes feed: RSS · Atom

cpe:2.3:a:liferay:liferay_portal:*:ga6:*:*:community_edition:*:*:*

part: a version: * update: ga6

VendorLiferay (5231553d-d54f-5cd9-bf56-0bf2ac7f0033)
ProductLiferay Portal (e3d198b8-0678-58dd-bf73-106b66a02cfe)
Edition*
Language*
Software editioncommunity_edition
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/liferay/portal purl2cpe 2026-06-01 10:15:56.434349
pkg:github/liferay/liferay-portal purl2cpe 2026-06-01 10:15:56.434351
pkg:liferay/liferay-portal purl2cpe 2026-06-01 10:15:56.434353
pkg:sourceforge/lportal purl2cpe 2026-06-01 10:15:56.434354

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-3670 vulnerable 2026-06-08 05:07:45.767589 Details available
Cross-site scripting (XSS) vulnerability in users.jsp in the Profile Search functionality in Liferay before 7.0.0 CE RC1 allows remote attackers to inject arbitrary web script or HTML via the FirstName field.
Published: 2016-06-13T14:00:00.000Z
Updated: 2024-08-06T00:03:34.472Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.