GCVE - cpe:2.3:a:liferay:liferay_portal:*:ga3:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:liferay:liferay_portal:*:ga3:*:*:*:*:*:*

part: a version: * update: ga3

Vendor	Liferay (`5231553d-d54f-5cd9-bf56-0bf2ac7f0033`)
Product	Liferay Portal (`e3d198b8-0678-58dd-bf73-106b66a02cfe`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-12649`	vulnerable	2026-06-08 05:08:47.439645	Details available XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted title or summary that is mishandled in the Web Content Display. Published: 2017-08-07T16:00:00.000Z Updated: 2024-09-17T02:17:07.801Z Open on db.gcve.eu Reference links https://github.com/brianchandotcom/liferay-portal/pull/47579 https://dev.liferay.com/web/community-security-team/known-vulnerabilities/liferay-portal-70/-/asset_publisher/cjE0ourZXJZE/content/cst-7017-multiple-xss-vulnerabilities	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-12648`	vulnerable	2026-06-08 05:08:47.439345	Details available XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL. Published: 2017-08-07T16:00:00.000Z Updated: 2024-09-16T23:45:33.948Z Open on db.gcve.eu Reference links https://github.com/brianchandotcom/liferay-portal/pull/47888 https://dev.liferay.com/web/community-security-team/known-vulnerabilities/liferay-portal-70/-/asset_publisher/cjE0ourZXJZE/content/cst-7017-multiple-xss-vulnerabilities	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-12647`	vulnerable	2026-06-08 05:08:47.439042	Details available XSS exists in Liferay Portal before 7.0 CE GA4 via a Knowledge Base article title. Published: 2017-08-07T16:00:00.000Z Updated: 2024-09-16T16:24:16.427Z Open on db.gcve.eu Reference links https://github.com/brianchandotcom/liferay-portal/pull/48901 https://dev.liferay.com/web/community-security-team/known-vulnerabilities/liferay-portal-70/-/asset_publisher/cjE0ourZXJZE/content/cst-7017-multiple-xss-vulnerabilities	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-12646`	vulnerable	2026-06-08 05:08:47.438721	Details available XSS exists in Liferay Portal before 7.0 CE GA4 via a login name, password, or e-mail address. Published: 2017-08-07T16:00:00.000Z Updated: 2024-09-16T16:34:07.654Z Open on db.gcve.eu Reference links https://github.com/brianchandotcom/liferay-portal/pull/49833 https://dev.liferay.com/web/community-security-team/known-vulnerabilities/liferay-portal-70/-/asset_publisher/cjE0ourZXJZE/content/cst-7017-multiple-xss-vulnerabilities	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-12645`	vulnerable	2026-06-08 05:08:47.438300	Details available XSS exists in Liferay Portal before 7.0 CE GA4 via an invalid portletId. Published: 2017-08-07T16:00:00.000Z Updated: 2024-09-16T17:33:38.382Z Open on db.gcve.eu Reference links https://issues.liferay.com/browse/LPS-72307 https://dev.liferay.com/web/community-security-team/known-vulnerabilities/liferay-portal-70/-/asset_publisher/cjE0ourZXJZE/content/cst-7017-multiple-xss-vulnerabilities	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-10404`	vulnerable	2026-06-08 05:07:17.853033	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.