CVE-2021-29049 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	6.1 MEDIUM	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 50%

Vendor	Product	Version
liferay	digital_experience_platform	7.0
liferay	digital_experience_platform	7.0:fix_pack_13
liferay	digital_experience_platform	7.0:fix_pack_14
liferay	digital_experience_platform	7.0:fix_pack_24
liferay	digital_experience_platform	7.0:fix_pack_25
liferay	digital_experience_platform	7.0:fix_pack_26
liferay	digital_experience_platform	7.0:fix_pack_27
liferay	digital_experience_platform	7.0:fix_pack_28
liferay	digital_experience_platform	7.0:fix_pack_3
liferay	digital_experience_platform	7.0:fix_pack_30
liferay	digital_experience_platform	7.0:fix_pack_33
liferay	digital_experience_platform	7.0:fix_pack_35
liferay	digital_experience_platform	7.0:fix_pack_36
liferay	digital_experience_platform	7.0:fix_pack_39
liferay	digital_experience_platform	7.0:fix_pack_40
liferay	digital_experience_platform	7.0:fix_pack_41
liferay	digital_experience_platform	7.0:fix_pack_42
liferay	digital_experience_platform	7.0:fix_pack_43
liferay	digital_experience_platform	7.0:fix_pack_44
liferay	digital_experience_platform	7.0:fix_pack_45
liferay	digital_experience_platform	7.0:fix_pack_46
liferay	digital_experience_platform	7.0:fix_pack_47
liferay	digital_experience_platform	7.0:fix_pack_48
liferay	digital_experience_platform	7.0:fix_pack_49
liferay	digital_experience_platform	7.0:fix_pack_50
liferay	digital_experience_platform	7.0:fix_pack_51
liferay	digital_experience_platform	7.0:fix_pack_52
liferay	digital_experience_platform	7.0:fix_pack_53
liferay	digital_experience_platform	7.0:fix_pack_54
liferay	digital_experience_platform	7.0:fix_pack_56
liferay	digital_experience_platform	7.0:fix_pack_57
liferay	digital_experience_platform	7.0:fix_pack_58
liferay	digital_experience_platform	7.0:fix_pack_59
liferay	digital_experience_platform	7.0:fix_pack_60
liferay	digital_experience_platform	7.0:fix_pack_61
liferay	digital_experience_platform	7.0:fix_pack_64
liferay	digital_experience_platform	7.0:fix_pack_65
liferay	digital_experience_platform	7.0:fix_pack_66
liferay	digital_experience_platform	7.0:fix_pack_67
liferay	digital_experience_platform	7.0:fix_pack_68
liferay	digital_experience_platform	7.0:fix_pack_69
liferay	digital_experience_platform	7.0:fix_pack_70
liferay	digital_experience_platform	7.0:fix_pack_71
liferay	digital_experience_platform	7.0:fix_pack_72
liferay	digital_experience_platform	7.0:fix_pack_73
liferay	digital_experience_platform	7.0:fix_pack_75
liferay	digital_experience_platform	7.0:fix_pack_76
liferay	digital_experience_platform	7.0:fix_pack_78
liferay	digital_experience_platform	7.0:fix_pack_79
liferay	digital_experience_platform	7.0:fix_pack_80
liferay	digital_experience_platform	7.0:fix_pack_81
liferay	digital_experience_platform	7.0:fix_pack_82
liferay	digital_experience_platform	7.0:fix_pack_83
liferay	digital_experience_platform	7.0:fix_pack_84
liferay	digital_experience_platform	7.0:fix_pack_85
liferay	digital_experience_platform	7.0:fix_pack_86
liferay	digital_experience_platform	7.0:fix_pack_87
liferay	digital_experience_platform	7.0:fix_pack_88
liferay	digital_experience_platform	7.0:fix_pack_89
liferay	digital_experience_platform	7.0:fix_pack_90
liferay	digital_experience_platform	7.0:fix_pack_91
liferay	digital_experience_platform	7.0:fix_pack_92
liferay	digital_experience_platform	7.0:fix_pack_93
liferay	digital_experience_platform	7.0:fix_pack_94
liferay	digital_experience_platform	7.0:fix_pack_95
liferay	digital_experience_platform	7.0:fix_pack_96
liferay	digital_experience_platform	7.0:sp2
liferay	digital_experience_platform	7.0:sp5
liferay	digital_experience_platform	7.1
liferay	digital_experience_platform	7.1:fix_pack_1
liferay	digital_experience_platform	7.1:fix_pack_10
liferay	digital_experience_platform	7.1:fix_pack_11
liferay	digital_experience_platform	7.1:fix_pack_12
liferay	digital_experience_platform	7.1:fix_pack_13
liferay	digital_experience_platform	7.1:fix_pack_14
liferay	digital_experience_platform	7.1:fix_pack_15
liferay	digital_experience_platform	7.1:fix_pack_16
liferay	digital_experience_platform	7.1:fix_pack_17
liferay	digital_experience_platform	7.1:fix_pack_18
liferay	digital_experience_platform	7.1:fix_pack_19
liferay	digital_experience_platform	7.1:fix_pack_2
liferay	digital_experience_platform	7.1:fix_pack_20
liferay	digital_experience_platform	7.1:fix_pack_21
liferay	digital_experience_platform	7.1:fix_pack_22
liferay	digital_experience_platform	7.1:fix_pack_3
liferay	digital_experience_platform	7.1:fix_pack_4
liferay	digital_experience_platform	7.1:fix_pack_5
liferay	digital_experience_platform	7.1:fix_pack_6
liferay	digital_experience_platform	7.1:fix_pack_7
liferay	digital_experience_platform	7.1:fix_pack_8
liferay	digital_experience_platform	7.1:fix_pack_9
liferay	digital_experience_platform	7.2
liferay	digital_experience_platform	7.2:fix_pack_1
liferay	digital_experience_platform	7.2:fix_pack_10
liferay	digital_experience_platform	7.2:fix_pack_11
liferay	digital_experience_platform	7.2:fix_pack_2
liferay	digital_experience_platform	7.2:fix_pack_3
liferay	digital_experience_platform	7.2:fix_pack_4
liferay	digital_experience_platform	7.2:fix_pack_5
liferay	digital_experience_platform	7.2:fix_pack_6
liferay	digital_experience_platform	7.2:fix_pack_7
liferay	digital_experience_platform	7.2:fix_pack_8
liferay	digital_experience_platform	7.2:fix_pack_9
liferay	dxp	7.3

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References

http://liferay.com

https://issues.liferay.com/browse/LPE-17211

http://liferay.com

https://issues.liferay.com/browse/LPE-17211