CVE-2022-42119

MEDIUM · CVSS 5.4 EPSS 0.39%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-11-15 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-42119

Severity

MEDIUM

CVSS

5.4

EPSS

0.39%

Original NVD Description

Certain Liferay products are vulnerable to Cross Site Scripting (XSS) via the Commerce module. This affects Liferay Portal 7.3.5 through 7.4.2 and Liferay DXP 7.3 before update 8.