Note: please note that Liferay has renamed its Liferay Experience
Could offerings to Liferay SaaS (formerly LXC) and
Liferay PaaS (formerly LXC-SM).
Issue
- I would like to inquire if the vulnerabilities CVE-2023-34329 and CVE–2023-34330 affect Liferay and the Liferay SaaS/PaaS
Environment
- Liferay DXP 7.2
- Liferay DXP 7.3
- Liferay DXP 7.4
Resolution
- The Security Team have analyzed the mentioned vulnerabilities and they do not affect Liferay SaaS/PaaS. They are related to hardware firmware.