Search for packages
| purl | pkg:maven/com.liferay.portal/release.dxp.bom@2023.q4.2 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-9fcg-wrp8-qhr4
Aliases: CVE-2025-2565 |
Liferay Portal and Liferay DXP Reveals Data via Forms The data exposure vulnerability in Liferay Portal 7.4.0 through 7.4.3.126, and … | There are no reported fixed by versions. |
|
GHSA-3mfq-fp2f-vwqh
Aliases: CVE-2024-38002 |
Liferay Portal and Liferay DXP Workflow Component Does Not Check User Permissions The workflow component in Liferay Portal 7.3.2 through … | There are no reported fixed by versions. |
|
CVE-2025-3760
Aliases: GHSA-qhp6-vp7c-g7xp |
Liferay Cross-site Scripting vulnerability A stored cross-site scripting (XSS) vulnerability exists with radio button type custom fields in Liferay Portal … | There are no reported fixed by versions. |
|
GHSA-qhp6-vp7c-g7xp
Aliases: CVE-2025-3760 |
Liferay Cross-site Scripting vulnerability A stored cross-site scripting (XSS) vulnerability exists with radio button type custom fields in Liferay Portal … | There are no reported fixed by versions. |
|
GHSA-hrc4-p2h3-pjqw
Aliases: CVE-2025-2536 |
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) Cross-site scripting (XSS) vulnerability on Liferay Portal 7.4.3.82 through 7.4.3.128, … | There are no reported fixed by versions. |
|
GHSA-7r3w-wggm-pjwf
Aliases: CVE-2022-28979 |
Liferay Portal and Liferay DXP Vulnerable to XSS in the Portal Search Module In Search Web before v6.0.19 in Liferay … | There are no reported fixed by versions. |
|
GHSA-6c4v-x9v2-rjm8
Aliases: CVE-2024-26271 |
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the My Account Widget Cross-site request forgery (CSRF) … | There are no reported fixed by versions. |
|
GHSA-p63m-vmjr-wg37
Aliases: CVE-2024-26272 |
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the Content Page Editor Cross-site request forgery (CSRF) … | There are no reported fixed by versions. |
|
GHSA-hmrx-6pr5-hpwj
Aliases: CVE-2024-26273 |
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the Content Page Editor Cross-site request forgery (CSRF) … | There are no reported fixed by versions. |