Approved changes feed: RSS · Atom

cpe:2.3:a:liferay:liferay_portal_enterprise:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLiferay (5231553d-d54f-5cd9-bf56-0bf2ac7f0033)
ProductLiferay Portal Enterprise (1fc1d8a7-6f80-51a5-ace7-1f71a6ac8b11)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-4400 vulnerable 2026-06-08 04:48:43.736027 Details available
Cross-site scripting (XSS) vulnerability in downloads/portal_ent in Liferay Portal Enterprise 3.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) _77_struts_action, (2) p_p_mode, and (3) p_p_state parameters.
Published: 2005-12-20T11:00:00.000Z
Updated: 2024-08-07T23:46:05.111Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.