Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.liferay.portal/com.liferay.portal.impl@109.0.0
purl pkg:maven/com.liferay.portal/com.liferay.portal.impl@109.0.0
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.1
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-rx48-gqc2-4w47
Aliases:
CVE-2025-62249
Liferay Portal reflected cross-site scripting (XSS) vulnerability in the google_gaget A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal … There are no reported fixed by versions.
GHSA-222w-xmc5-jhp3
Aliases:
CVE-2025-43735
Liferay Portal and Liferay DXP have a reflected cross-site scripting vulnerability A reflected cross-site scripting (XSS) vulnerability in the Liferay …
109.1.0
Vulnerable
109.1.0
Vulnerable
This package is not known to fix any advisories.