Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.liferay.portal/com.liferay.portal.impl@109.1.0
purl pkg:maven/com.liferay.portal/com.liferay.portal.impl@109.1.0
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.1
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-rx48-gqc2-4w47
Aliases:
CVE-2025-62249
Liferay Portal reflected cross-site scripting (XSS) vulnerability in the google_gaget A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal … There are no reported fixed by versions.
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-222w-xmc5-jhp3
Liferay Portal and Liferay DXP have a reflected cross-site scripting vulnerability A reflected cross-site scripting (XSS) vulnerability in the Liferay … CVE-2025-43735