Search for packages
| purl | pkg:maven/com.liferay.portal/release.dxp.bom@2024.Q3.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-9fcg-wrp8-qhr4
Aliases: CVE-2025-2565 |
Liferay Portal and Liferay DXP Reveals Data via Forms The data exposure vulnerability in Liferay Portal 7.4.0 through 7.4.3.126, and … | There are no reported fixed by versions. |
|
CVE-2025-43776
Aliases: GHSA-rcc7-jx7p-hrv4 |
Liferay Portal and Liferay DXP vulnerable to store Cross-site Scripting A stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 … | There are no reported fixed by versions. |
|
GHSA-cg99-m88x-422c
Aliases: CVE-2025-43736 |
Liferay Portal and Liferay DXP have a Denial Of Service via File Upload (DOS) vulnerability A Denial Of Service via … | There are no reported fixed by versions. |
|
GHSA-hrc4-p2h3-pjqw
Aliases: CVE-2025-2536 |
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) Cross-site scripting (XSS) vulnerability on Liferay Portal 7.4.3.82 through 7.4.3.128, … | There are no reported fixed by versions. |
|
GHSA-rcc7-jx7p-hrv4
Aliases: CVE-2025-43776 |
Liferay Portal and Liferay DXP vulnerable to store Cross-site Scripting A stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2025-43785
|
Liferay Portal and Liferay DXP vulnerable to Stored Cross-site Scripting A stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.45 … |
GHSA-66x6-8jgv-qpfh
|
|
GHSA-66x6-8jgv-qpfh
|
Liferay Portal and Liferay DXP vulnerable to Stored Cross-site Scripting A stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.45 … |
CVE-2025-43785
|