Search for packages
| purl | pkg:maven/com.liferay.portal/com.liferay.portal.impl@101.0.0 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-rx48-gqc2-4w47
Aliases: CVE-2025-62249 |
Liferay Portal reflected cross-site scripting (XSS) vulnerability in the google_gaget A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal … | There are no reported fixed by versions. |
|
GHSA-cv9j-mg9w-v7wm
Aliases: CVE-2025-43768 |
Liferay Portal JSONWS API endpoint shares sensitive information Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 … |
Vulnerable |
|
GHSA-222w-xmc5-jhp3
Aliases: CVE-2025-43735 |
Liferay Portal and Liferay DXP have a reflected cross-site scripting vulnerability A reflected cross-site scripting (XSS) vulnerability in the Liferay … |
Vulnerable Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-95h4-8mqc-4mpf
|
Liferay Portal has unchecked input for loop condition vulnerability in XML-RPC Unchecked input for loop condition vulnerability in XML-RPC in … |
CVE-2025-43801
|
|
GHSA-697h-3q6m-jwp4
|
Liferay Portal Cross-Site Request Forgery (CSRF) vulnerability Cross-Site Request Forgery (CSRF) vulnerability in the server (license) registration page in Liferay … |
CVE-2025-43809
|