Search for packages
| purl | pkg:maven/com.liferay.portal/release.dxp.bom@7.2.10.5 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-82j7-2h3j-hc7f
Aliases: CVE-2021-29041 |
Liferay DXP Vulnerable to Denial-of-service (DoS) in the Multi-Factor Authentication Module Denial-of-service (DoS) vulnerability in the Multi-Factor Authentication module in … |
Vulnerable |
|
GHSA-pr7v-qv65-rp9m
Aliases: CVE-2021-29052 |
Liferay Portal and Liferay DXP Fails to Check Permissions The Data Engine module in Liferay Portal 7.3.0 through 7.3.5, and … |
Vulnerable |
|
GHSA-f9wj-c5pc-g9rh
Aliases: CVE-2021-29053 |
Liferay Portal and Liferay DXP Vulnerable to Multiple SQL Injections Multiple SQL injection vulnerabilities in Liferay Portal 7.3.5 and Liferay … |
Vulnerable |
|
GHSA-9mxg-p873-6793
Aliases: CVE-2021-29047 |
Liferay Portal and Liferay DXP Fails to Invalidate CAPTCHA Answers After Use The SimpleCaptcha implementation in Liferay Portal 7.3.4, 7.3.5 … |
Vulnerable |
|
GHSA-jp3m-vh3g-6ggp
Aliases: CVE-2021-38266 |
Liferay Portal and Liferay DXP fails to properly import users from LDAP Security LDAP Implementation before 2.0.16 from Liferay Portal … | There are no reported fixed by versions. |
|
GHSA-ghw5-998m-vw4w
Aliases: CVE-2022-25146 |
Liferay Portal and Liferay DXP fails to check origin of event messages The Remote App module before 2.0.21 from Liferay … |
Vulnerable |
|
GHSA-3x83-whxw-pvmg
Aliases: CVE-2021-38265 |
Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) Liferay Layout Admin Web before 5.0.0 in Liferay Portal v7.3.6 … | There are no reported fixed by versions. |
|
GHSA-8mp9-w7gr-pvj3
Aliases: CVE-2022-28980 |
Liferay Portal and Liferay DXP Vulnerable to XSS via the filter_ Prefix Multiple cross-site scripting (XSS) vulnerabilities in Liferay Fragment … | There are no reported fixed by versions. |
|
GHSA-px38-239g-x5mg
Aliases: CVE-2023-37940 |
Liferay Portal and Liferay DXP have Cross-site Scripting vulnerability in edit Service Access Policy page Cross-site scripting (XSS) vulnerability in … |
Vulnerable |
|
GHSA-4hxr-28mv-q729
Aliases: CVE-2024-11993 |
Liferay Portal and Liferay DXP vulnerable to Cross-site Scripting Reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.1.0 through 7.4.3.38, … |
Vulnerable |
|
GHSA-qhp6-vp7c-g7xp
Aliases: CVE-2025-3760 |
Liferay Cross-site Scripting vulnerability A stored cross-site scripting (XSS) vulnerability exists with radio button type custom fields in Liferay Portal … | There are no reported fixed by versions. |
|
GHSA-222w-xmc5-jhp3
Aliases: CVE-2025-43735 |
Liferay Portal and Liferay DXP have a reflected cross-site scripting vulnerability A reflected cross-site scripting (XSS) vulnerability in the Liferay … | There are no reported fixed by versions. |
|
GHSA-cg99-m88x-422c
Aliases: CVE-2025-43736 |
Liferay Portal and Liferay DXP have a Denial Of Service via File Upload (DOS) vulnerability A Denial Of Service via … | There are no reported fixed by versions. |
|
GHSA-c6g5-g6r7-q4j6
Aliases: CVE-2025-4655 |
Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery An SSRF vulnerability in FreeMarker templates in Liferay Portal 7.4.0 … | There are no reported fixed by versions. |
|
GHSA-m5c7-5gv3-hcpf
Aliases: CVE-2025-43734 |
Liferay Portal 7.4.0 and Liferay DXP have a reflected cross-site scripting (XSS) vulnerability A reflected cross-site scripting (XSS) vulnerability in … |
Vulnerable Vulnerable |
|
GHSA-6v93-frf9-2rp8
Aliases: CVE-2025-4581 |
Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through … | There are no reported fixed by versions. |
|
GHSA-7r3w-wggm-pjwf
Aliases: CVE-2022-28979 |
Liferay Portal and Liferay DXP Vulnerable to XSS in the Portal Search Module In Search Web before v6.0.19 in Liferay … | There are no reported fixed by versions. |