Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.liferay.portal/com.liferay.portal.impl@108.1.1
purl pkg:maven/com.liferay.portal/com.liferay.portal.impl@108.1.1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.1
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-rx48-gqc2-4w47
Aliases:
CVE-2025-62249
Liferay Portal reflected cross-site scripting (XSS) vulnerability in the google_gaget A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal … There are no reported fixed by versions.
GHSA-222w-xmc5-jhp3
Aliases:
CVE-2025-43735
Liferay Portal and Liferay DXP have a reflected cross-site scripting vulnerability A reflected cross-site scripting (XSS) vulnerability in the Liferay …
109.1.0
Vulnerable
109.1.0
Vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-cv9j-mg9w-v7wm
Liferay Portal JSONWS API endpoint shares sensitive information Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 … CVE-2025-43768