CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-25606

XXE vulnerability in Liferay Portal 7.2.0 through 7.4.3.7, and older unsupported versions, and Liferay DXP 7.4 before update 4, 7.3 before update 12, 7.2 before fix pack 20, and older unsupported versions allows attackers with permission to deploy widgets/portlets/extensions to obtain sensitive information or consume system resources via the Java2WsddTask._format method.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 28.8%

CVSS Severity

CVSS v3 Score 8.0

References

Products affected by CVE-2024-25606

Liferay » Digital Experience Platform » Version: N/A

cpe:2.3:a:liferay:digital_experience_platform:-
Liferay » Digital Experience Platform » Version: 6.2

cpe:2.3:a:liferay:digital_experience_platform:6.2
Liferay » Digital Experience Platform » Version: 7.0

cpe:2.3:a:liferay:digital_experience_platform:7.0
Liferay » Digital Experience Platform » Version: 7.1

cpe:2.3:a:liferay:digital_experience_platform:7.1
Liferay » Digital Experience Platform » Version: 7.2

cpe:2.3:a:liferay:digital_experience_platform:7.2
Liferay » Digital Experience Platform » Version: 7.3

cpe:2.3:a:liferay:digital_experience_platform:7.3
Liferay » Digital Experience Platform » Version: 7.4

cpe:2.3:a:liferay:digital_experience_platform:7.4
Liferay » Liferay Portal » Version: N/A

cpe:2.3:a:liferay:liferay_portal:-
Liferay » Liferay Portal » Version: 1.7.5

cpe:2.3:a:liferay:liferay_portal:1.7.5
Liferay » Liferay Portal » Version: 1.8.0

cpe:2.3:a:liferay:liferay_portal:1.8.0
Liferay » Liferay Portal » Version: 1.9.0

cpe:2.3:a:liferay:liferay_portal:1.9.0
Liferay » Liferay Portal » Version: 1.9.1

cpe:2.3:a:liferay:liferay_portal:1.9.1
Liferay » Liferay Portal » Version: 1.9.5

cpe:2.3:a:liferay:liferay_portal:1.9.5
Liferay » Liferay Portal » Version: 2.0.0

cpe:2.3:a:liferay:liferay_portal:2.0.0
Liferay » Liferay Portal » Version: 2.0.3

cpe:2.3:a:liferay:liferay_portal:2.0.3
Liferay » Liferay Portal » Version: 2.1.0

cpe:2.3:a:liferay:liferay_portal:2.1.0
Liferay » Liferay Portal » Version: 2.1.1

cpe:2.3:a:liferay:liferay_portal:2.1.1
Liferay » Liferay Portal » Version: 2.2.0

cpe:2.3:a:liferay:liferay_portal:2.2.0
Liferay » Liferay Portal » Version: 2.2.1

cpe:2.3:a:liferay:liferay_portal:2.2.1
Liferay » Liferay Portal » Version: 2.2.5

cpe:2.3:a:liferay:liferay_portal:2.2.5
Liferay » Liferay Portal » Version: 3.0.0

cpe:2.3:a:liferay:liferay_portal:3.0.0
Liferay » Liferay Portal » Version: 3.1.0

cpe:2.3:a:liferay:liferay_portal:3.1.0
Liferay » Liferay Portal » Version: 3.2.0

cpe:2.3:a:liferay:liferay_portal:3.2.0
Liferay » Liferay Portal » Version: 3.5.0

cpe:2.3:a:liferay:liferay_portal:3.5.0
Liferay » Liferay Portal » Version: 3.6.0

cpe:2.3:a:liferay:liferay_portal:3.6.0
Liferay » Liferay Portal » Version: 3.6.1

cpe:2.3:a:liferay:liferay_portal:3.6.1
Liferay » Liferay Portal » Version: 4.0.0

cpe:2.3:a:liferay:liferay_portal:4.0.0
Liferay » Liferay Portal » Version: 4.1.0

cpe:2.3:a:liferay:liferay_portal:4.1.0
Liferay » Liferay Portal » Version: 4.1.1

cpe:2.3:a:liferay:liferay_portal:4.1.1
Liferay » Liferay Portal » Version: 4.1.2

cpe:2.3:a:liferay:liferay_portal:4.1.2
Liferay » Liferay Portal » Version: 4.1.3

cpe:2.3:a:liferay:liferay_portal:4.1.3
Liferay » Liferay Portal » Version: 4.2.0

cpe:2.3:a:liferay:liferay_portal:4.2.0
Liferay » Liferay Portal » Version: 4.2.1

cpe:2.3:a:liferay:liferay_portal:4.2.1
Liferay » Liferay Portal » Version: 4.2.2

cpe:2.3:a:liferay:liferay_portal:4.2.2
Liferay » Liferay Portal » Version: 4.3.0

cpe:2.3:a:liferay:liferay_portal:4.3.0
Liferay » Liferay Portal » Version: 4.3.1

cpe:2.3:a:liferay:liferay_portal:4.3.1
Liferay » Liferay Portal » Version: 4.3.2

cpe:2.3:a:liferay:liferay_portal:4.3.2
Liferay » Liferay Portal » Version: 4.3.3

cpe:2.3:a:liferay:liferay_portal:4.3.3
Liferay » Liferay Portal » Version: 4.3.4

cpe:2.3:a:liferay:liferay_portal:4.3.4
Liferay » Liferay Portal » Version: 4.3.5

cpe:2.3:a:liferay:liferay_portal:4.3.5
Liferay » Liferay Portal » Version: 4.3.6

cpe:2.3:a:liferay:liferay_portal:4.3.6
Liferay » Liferay Portal » Version: 4.4.0

cpe:2.3:a:liferay:liferay_portal:4.4.0
Liferay » Liferay Portal » Version: 4.4.1

cpe:2.3:a:liferay:liferay_portal:4.4.1
Liferay » Liferay Portal » Version: 4.4.2

cpe:2.3:a:liferay:liferay_portal:4.4.2
Liferay » Liferay Portal » Version: 5.0.0

cpe:2.3:a:liferay:liferay_portal:5.0.0
Liferay » Liferay Portal » Version: 5.1.0

cpe:2.3:a:liferay:liferay_portal:5.1.0
Liferay » Liferay Portal » Version: 5.1.1

cpe:2.3:a:liferay:liferay_portal:5.1.1
Liferay » Liferay Portal » Version: 5.1.2

cpe:2.3:a:liferay:liferay_portal:5.1.2
Liferay » Liferay Portal » Version: 5.2

cpe:2.3:a:liferay:liferay_portal:5.2
Liferay » Liferay Portal » Version: 5.2.0

cpe:2.3:a:liferay:liferay_portal:5.2.0
Liferay » Liferay Portal » Version: 5.2.1

cpe:2.3:a:liferay:liferay_portal:5.2.1
Liferay » Liferay Portal » Version: 5.2.2

cpe:2.3:a:liferay:liferay_portal:5.2.2
Liferay » Liferay Portal » Version: 5.2.3

cpe:2.3:a:liferay:liferay_portal:5.2.3
Liferay » Liferay Portal » Version: 6.0

cpe:2.3:a:liferay:liferay_portal:6.0
Liferay » Liferay Portal » Version: 6.0.0

cpe:2.3:a:liferay:liferay_portal:6.0.0
Liferay » Liferay Portal » Version: 6.0.1

cpe:2.3:a:liferay:liferay_portal:6.0.1
Liferay » Liferay Portal » Version: 6.0.2

cpe:2.3:a:liferay:liferay_portal:6.0.2
Liferay » Liferay Portal » Version: 6.0.3

cpe:2.3:a:liferay:liferay_portal:6.0.3
Liferay » Liferay Portal » Version: 6.0.4

cpe:2.3:a:liferay:liferay_portal:6.0.4
Liferay » Liferay Portal » Version: 6.0.5

cpe:2.3:a:liferay:liferay_portal:6.0.5
Liferay » Liferay Portal » Version: 6.0.6

cpe:2.3:a:liferay:liferay_portal:6.0.6
Liferay » Liferay Portal » Version: 6.1

cpe:2.3:a:liferay:liferay_portal:6.1
Liferay » Liferay Portal » Version: 6.1.0

cpe:2.3:a:liferay:liferay_portal:6.1.0
Liferay » Liferay Portal » Version: 6.1.1

cpe:2.3:a:liferay:liferay_portal:6.1.1
Liferay » Liferay Portal » Version: 6.1.2

cpe:2.3:a:liferay:liferay_portal:6.1.2
Liferay » Liferay Portal » Version: 6.1.2_ce_ga3

cpe:2.3:a:liferay:liferay_portal:6.1.2_ce_ga3
Liferay » Liferay Portal » Version: 6.1.x_ee

cpe:2.3:a:liferay:liferay_portal:6.1.x_ee
Liferay » Liferay Portal » Version: 6.2

cpe:2.3:a:liferay:liferay_portal:6.2
Liferay » Liferay Portal » Version: 6.2.0

cpe:2.3:a:liferay:liferay_portal:6.2.0
Liferay » Liferay Portal » Version: 6.2.1

cpe:2.3:a:liferay:liferay_portal:6.2.1
Liferay » Liferay Portal » Version: 6.2.2

cpe:2.3:a:liferay:liferay_portal:6.2.2
Liferay » Liferay Portal » Version: 6.2.3

cpe:2.3:a:liferay:liferay_portal:6.2.3
Liferay » Liferay Portal » Version: 6.2.4

cpe:2.3:a:liferay:liferay_portal:6.2.4
Liferay » Liferay Portal » Version: 6.2.5

cpe:2.3:a:liferay:liferay_portal:6.2.5
Liferay » Liferay Portal » Version: 6.2.x_ee

cpe:2.3:a:liferay:liferay_portal:6.2.x_ee
Liferay » Liferay Portal » Version: 7.0

cpe:2.3:a:liferay:liferay_portal:7.0
Liferay » Liferay Portal » Version: 7.0.0

cpe:2.3:a:liferay:liferay_portal:7.0.0
Liferay » Liferay Portal » Version: 7.0.1

cpe:2.3:a:liferay:liferay_portal:7.0.1
Liferay » Liferay Portal » Version: 7.0.2

cpe:2.3:a:liferay:liferay_portal:7.0.2
Liferay » Liferay Portal » Version: 7.0.3

cpe:2.3:a:liferay:liferay_portal:7.0.3
Liferay » Liferay Portal » Version: 7.0.3_ga4

cpe:2.3:a:liferay:liferay_portal:7.0.3_ga4
Liferay » Liferay Portal » Version: 7.0.4

cpe:2.3:a:liferay:liferay_portal:7.0.4
Liferay » Liferay Portal » Version: 7.0.5

cpe:2.3:a:liferay:liferay_portal:7.0.5
Liferay » Liferay Portal » Version: 7.0.6

cpe:2.3:a:liferay:liferay_portal:7.0.6
Liferay » Liferay Portal » Version: 7.1

cpe:2.3:a:liferay:liferay_portal:7.1
Liferay » Liferay Portal » Version: 7.1.0

cpe:2.3:a:liferay:liferay_portal:7.1.0
Liferay » Liferay Portal » Version: 7.1.1

cpe:2.3:a:liferay:liferay_portal:7.1.1
Liferay » Liferay Portal » Version: 7.1.2

cpe:2.3:a:liferay:liferay_portal:7.1.2
Liferay » Liferay Portal » Version: 7.1.3

cpe:2.3:a:liferay:liferay_portal:7.1.3
Liferay » Liferay Portal » Version: 7.2

cpe:2.3:a:liferay:liferay_portal:7.2
Liferay » Liferay Portal » Version: 7.2.0

cpe:2.3:a:liferay:liferay_portal:7.2.0
Liferay » Liferay Portal » Version: 7.2.1

cpe:2.3:a:liferay:liferay_portal:7.2.1
Liferay » Liferay Portal » Version: 7.3

cpe:2.3:a:liferay:liferay_portal:7.3
Liferay » Liferay Portal » Version: 7.3.0

cpe:2.3:a:liferay:liferay_portal:7.3.0
Liferay » Liferay Portal » Version: 7.3.1

cpe:2.3:a:liferay:liferay_portal:7.3.1
Liferay » Liferay Portal » Version: 7.3.2

cpe:2.3:a:liferay:liferay_portal:7.3.2
Liferay » Liferay Portal » Version: 7.3.3

cpe:2.3:a:liferay:liferay_portal:7.3.3
Liferay » Liferay Portal » Version: 7.3.4

cpe:2.3:a:liferay:liferay_portal:7.3.4
Liferay » Liferay Portal » Version: 7.3.5

cpe:2.3:a:liferay:liferay_portal:7.3.5
Liferay » Liferay Portal » Version: 7.3.6

cpe:2.3:a:liferay:liferay_portal:7.3.6
Liferay » Liferay Portal » Version: 7.3.7

cpe:2.3:a:liferay:liferay_portal:7.3.7
Liferay » Liferay Portal » Version: 7.4.0

cpe:2.3:a:liferay:liferay_portal:7.4.0
Liferay » Liferay Portal » Version: 7.4.1

cpe:2.3:a:liferay:liferay_portal:7.4.1
Liferay » Liferay Portal » Version: 7.4.2

cpe:2.3:a:liferay:liferay_portal:7.4.2
Liferay » Liferay Portal » Version: 7.4.3.4

cpe:2.3:a:liferay:liferay_portal:7.4.3.4
Liferay » Liferay Portal » Version: 7.4.3.5

cpe:2.3:a:liferay:liferay_portal:7.4.3.5
Liferay » Liferay Portal » Version: 7.4.3.6

cpe:2.3:a:liferay:liferay_portal:7.4.3.6
Liferay » Liferay Portal » Version: 7.4.3.7

cpe:2.3:a:liferay:liferay_portal:7.4.3.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-25606

Products

Pricing

Contact Us