{"api_version":"1","generated_at":"2026-07-24T01:14:21+00:00","cve":"CVE-2016-3670","urls":{"html":"https://cve.report/CVE-2016-3670","api":"https://cve.report/api/cve/CVE-2016-3670.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2016-3670","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2016-3670"},"summary":{"title":"CVE-2016-3670","description":"Cross-site scripting (XSS) vulnerability in users.jsp in the Profile Search functionality in Liferay before 7.0.0 CE RC1 allows remote attackers to inject arbitrary web script or HTML via the FirstName field.","state":"PUBLISHED","assigner":"mitre","published_at":"2016-06-13 14:59:03","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"3.0","source":"nvd@nist.gov","type":"Primary","score":"6.1","severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","data":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securitytracker.com/id/1036083","name":"http://www.securitytracker.com/id/1036083","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Liferay Enterprise Portal Input Validation Flaw in Profile Search Lets Remote Conduct Cross-Site Scripting Attacks - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://packetstormsecurity.com/files/137279/Liferay-CE-Stored-Cross-Site-Scripting.html","name":"http://packetstormsecurity.com/files/137279/Liferay-CE-Stored-Cross-Site-Scripting.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Liferay CE Stored Cross Site Scripting ≈ Packet Storm","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.exploit-db.com/exploits/39880/","name":"https://www.exploit-db.com/exploits/39880/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Liferay CE < 6.2 CE GA6 - Persistent Cross-Site Scripting - JSP webapps Exploit","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://labs.integrity.pt/advisories/cve-2016-3670/","name":"https://labs.integrity.pt/advisories/cve-2016-3670/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"CVE-2016-3670 Stored Cross Site Scripting in Liferay CE | INTEGRITY Labs","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://issues.liferay.com/browse/LPS-62387","name":"https://issues.liferay.com/browse/LPS-62387","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Log in - Liferay Issues","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://seclists.org/fulldisclosure/2016/Jun/5","name":"http://seclists.org/fulldisclosure/2016/Jun/5","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Full Disclosure: CVE-2016-3670 Stored Cross Site Scripting in Liferay CE","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3670","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3670","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2016","cve_id":"3670","vulnerable":"1","versionEndIncluding":"6.2","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"liferay","cpe5":"liferay_portal","cpe6":"*","cpe7":"ga6","cpe8":"*","cpe9":"*","cpe10":"community_edition","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T00:03:34.472Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"https://labs.integrity.pt/advisories/cve-2016-3670/"},{"name":"39880","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/39880/"},{"name":"20160601 CVE-2016-3670 Stored Cross Site Scripting in Liferay CE","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"],"url":"http://seclists.org/fulldisclosure/2016/Jun/5"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://issues.liferay.com/browse/LPS-62387"},{"name":"1036083","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id/1036083"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://packetstormsecurity.com/files/137279/Liferay-CE-Stored-Cross-Site-Scripting.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2016-06-01T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in users.jsp in the Profile Search functionality in Liferay before 7.0.0 CE RC1 allows remote attackers to inject arbitrary web script or HTML via the FirstName field."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2016-06-15T15:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"https://labs.integrity.pt/advisories/cve-2016-3670/"},{"name":"39880","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/39880/"},{"name":"20160601 CVE-2016-3670 Stored Cross Site Scripting in Liferay CE","tags":["mailing-list","x_refsource_FULLDISC"],"url":"http://seclists.org/fulldisclosure/2016/Jun/5"},{"tags":["x_refsource_CONFIRM"],"url":"https://issues.liferay.com/browse/LPS-62387"},{"name":"1036083","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id/1036083"},{"tags":["x_refsource_MISC"],"url":"http://packetstormsecurity.com/files/137279/Liferay-CE-Stored-Cross-Site-Scripting.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2016-3670","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in users.jsp in the Profile Search functionality in Liferay before 7.0.0 CE RC1 allows remote attackers to inject arbitrary web script or HTML via the FirstName field."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"https://labs.integrity.pt/advisories/cve-2016-3670/","refsource":"MISC","url":"https://labs.integrity.pt/advisories/cve-2016-3670/"},{"name":"39880","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/39880/"},{"name":"20160601 CVE-2016-3670 Stored Cross Site Scripting in Liferay CE","refsource":"FULLDISC","url":"http://seclists.org/fulldisclosure/2016/Jun/5"},{"name":"https://issues.liferay.com/browse/LPS-62387","refsource":"CONFIRM","url":"https://issues.liferay.com/browse/LPS-62387"},{"name":"1036083","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1036083"},{"name":"http://packetstormsecurity.com/files/137279/Liferay-CE-Stored-Cross-Site-Scripting.html","refsource":"MISC","url":"http://packetstormsecurity.com/files/137279/Liferay-CE-Stored-Cross-Site-Scripting.html"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2016-3670","datePublished":"2016-06-13T14:00:00.000Z","dateReserved":"2016-03-24T00:00:00.000Z","dateUpdated":"2024-08-06T00:03:34.472Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2016-06-13 14:59:03","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:liferay:liferay_portal:*:ga6:*:*:community_edition:*:*:*","versionEndIncluding":"6.2","matchCriteriaId":"ABC83FA6-F7FB-440D-B660-2536A8183E93"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2016","CveId":"3670","Ordinal":"1","Title":"CVE-2016-3670","CVE":"CVE-2016-3670","Year":"2016"},"notes":[{"CveYear":"2016","CveId":"3670","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in users.jsp in the Profile Search functionality in Liferay before 7.0.0 CE RC1 allows remote attackers to inject arbitrary web script or HTML via the FirstName field.","Type":"Description","Title":"CVE-2016-3670"},{"CveYear":"2016","CveId":"3670","Ordinal":"2","NoteData":"2016-06-13","Type":"Other","Title":"Published"},{"CveYear":"2016","CveId":"3670","Ordinal":"3","NoteData":"2016-06-15","Type":"Other","Title":"Modified"}]}}}