Approved changes feed: RSS · Atom

cpe:2.3:a:liferay:portal:5.1.2:*:community:*:*:*:*:*

part: a version: 5.1.2 update: *

VendorLiferay (5231553d-d54f-5cd9-bf56-0bf2ac7f0033)
ProductPortal (0b3cf289-5155-5c1a-a384-a39d92c90587)
Editioncommunity
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/liferay/liferay-portal purl2cpe 2026-06-01 10:15:56.463817
pkg:maven/com.liferay.portal/com.liferay.portal.kernel purl2cpe 2026-06-01 10:15:56.463819

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-1504 vulnerable 2026-06-08 04:57:59.844117 Details available
Cross-site scripting (XSS) vulnerability in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA allows remote authenticated users to inject arbitrary web script or HTML via a blog title.
Published: 2011-05-07T19:00:00.000Z
Updated: 2024-09-16T20:32:19.205Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.