Search for packages
| purl | pkg:maven/com.liferay.portal/release.dxp.bom@2023.q3.4 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.3 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-9fcg-wrp8-qhr4
Aliases: CVE-2025-2565 |
Liferay Portal and Liferay DXP Reveals Data via Forms The data exposure vulnerability in Liferay Portal 7.4.0 through 7.4.3.126, and … | There are no reported fixed by versions. |
|
GHSA-3mfq-fp2f-vwqh
Aliases: CVE-2024-38002 |
Liferay Portal and Liferay DXP Workflow Component Does Not Check User Permissions The workflow component in Liferay Portal 7.3.2 through … | There are no reported fixed by versions. |
|
GHSA-chj2-4vg7-hhg3
Aliases: CVE-2024-8980 |
Liferay Portal and Liferay DXP Vulnerable to CSRF in the Script Console The Script Console in Liferay Portal 7.0.0 through … | There are no reported fixed by versions. |
|
GHSA-f3rf-cr7f-cwc4
Aliases: CVE-2023-5190 |
Liferay Portal and Liferay DXP Vulnerable to Open Redirect in Countries Management's Edit Region Page Open redirect vulnerability in the … | There are no reported fixed by versions. |
|
GHSA-xq4r-4xfh-vch8
Aliases: CVE-2024-26270 |
Liferay Portal and Liferay DXP vulnerable to theft of hashed password The Account Settings page in Liferay Portal 7.4.3.76 through … | There are no reported fixed by versions. |
|
CVE-2025-3760
Aliases: GHSA-qhp6-vp7c-g7xp |
Liferay Cross-site Scripting vulnerability A stored cross-site scripting (XSS) vulnerability exists with radio button type custom fields in Liferay Portal … | There are no reported fixed by versions. |
|
GHSA-qhp6-vp7c-g7xp
Aliases: CVE-2025-3760 |
Liferay Cross-site Scripting vulnerability A stored cross-site scripting (XSS) vulnerability exists with radio button type custom fields in Liferay Portal … | There are no reported fixed by versions. |
|
GHSA-hrc4-p2h3-pjqw
Aliases: CVE-2025-2536 |
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) Cross-site scripting (XSS) vulnerability on Liferay Portal 7.4.3.82 through 7.4.3.128, … | There are no reported fixed by versions. |
|
GHSA-7r3w-wggm-pjwf
Aliases: CVE-2022-28979 |
Liferay Portal and Liferay DXP Vulnerable to XSS in the Portal Search Module In Search Web before v6.0.19 in Liferay … | There are no reported fixed by versions. |
|
GHSA-6c4v-x9v2-rjm8
Aliases: CVE-2024-26271 |
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the My Account Widget Cross-site request forgery (CSRF) … | There are no reported fixed by versions. |
|
GHSA-p63m-vmjr-wg37
Aliases: CVE-2024-26272 |
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the Content Page Editor Cross-site request forgery (CSRF) … | There are no reported fixed by versions. |
|
GHSA-hmrx-6pr5-hpwj
Aliases: CVE-2024-26273 |
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the Content Page Editor Cross-site request forgery (CSRF) … | There are no reported fixed by versions. |
|
GHSA-q2cv-7j58-rfmj
Aliases: CVE-2023-47795 |
Liferay Portal Document and Media widget and Liferay DXP vulnerable to stored Cross-site Scripting Stored cross-site scripting (XSS) vulnerability in … | There are no reported fixed by versions. |
|
GHSA-468x-frcm-ghx6
Aliases: CVE-2023-40191 |
Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting Reflected cross-site scripting (XSS) vulnerability in the instance settings for … | There are no reported fixed by versions. |
|
GHSA-73x3-8mrg-5r93
Aliases: CVE-2023-42498 |
Liferay Portal Language Override edit screen and Liferay DXP vulnerable to reflected Cross-site Scripting Reflected cross-site scripting (XSS) vulnerability in … | There are no reported fixed by versions. |
|
GHSA-54pv-r62j-9qqc
Aliases: CVE-2023-42496 |
Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting Reflected cross-site scripting (XSS) vulnerability on the add assignees to … | There are no reported fixed by versions. |