Search for packages
| purl | pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u35 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.3 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-cmrw-cgfc-v6x2
Aliases: CVE-2022-42114 |
Liferay Portal and Liferay DXP Vulnerable to XSS via the Role Module A Cross-site scripting (XSS) vulnerability in the Role … |
Vulnerable |
|
GHSA-3mfq-fp2f-vwqh
Aliases: CVE-2024-38002 |
Liferay Portal and Liferay DXP Workflow Component Does Not Check User Permissions The workflow component in Liferay Portal 7.3.2 through … |
Vulnerable |
|
GHSA-chj2-4vg7-hhg3
Aliases: CVE-2024-8980 |
Liferay Portal and Liferay DXP Vulnerable to CSRF in the Script Console The Script Console in Liferay Portal 7.0.0 through … | There are no reported fixed by versions. |
|
GHSA-px38-239g-x5mg
Aliases: CVE-2023-37940 |
Liferay Portal and Liferay DXP have Cross-site Scripting vulnerability in edit Service Access Policy page Cross-site scripting (XSS) vulnerability in … |
Vulnerable |
|
GHSA-4hxr-28mv-q729
Aliases: CVE-2024-11993 |
Liferay Portal and Liferay DXP vulnerable to Cross-site Scripting Reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.1.0 through 7.4.3.38, … |
Vulnerable |
|
GHSA-44jg-jgjx-3xg5
Aliases: CVE-2024-25603 |
Liferay Portal's Dynamic Data Mapping module's DDMForm and Liferay DXP vulnerable to stored Cross-site Scripting Stored cross-site scripting (XSS) vulnerability … | There are no reported fixed by versions. |
|
GHSA-xq4r-4xfh-vch8
Aliases: CVE-2024-26270 |
Liferay Portal and Liferay DXP vulnerable to theft of hashed password The Account Settings page in Liferay Portal 7.4.3.76 through … | There are no reported fixed by versions. |
|
GHSA-qp68-5v39-r869
Aliases: CVE-2023-42627 |
Liferay Portal and Liferay DXP Vulnerable to XSS in the Commerce Module Multiple stored cross-site scripting (XSS) vulnerabilities in the … | There are no reported fixed by versions. |
|
GHSA-w2g3-j73q-7qv7
Aliases: CVE-2023-42497 |
Liferay Portal and Liferay DXP Vulnerable to Reflected XSS via the Export for Translation Page Reflected cross-site scripting (XSS) vulnerability … |
Vulnerable |
|
GHSA-g44j-f8wm-6622
Aliases: CVE-2023-42629 |
Liferay Portal and Liferay DXP Vulnerable to Stored XSS in the Manage Vocabulary Page Stored cross-site scripting (XSS) vulnerability in … |
Vulnerable |
|
GHSA-hv45-r2f5-fmhj
Aliases: CVE-2023-42628 |
Liferay Portal and Liferay DXP Vulnerable to XSS in the Wiki Widget Stored cross-site scripting (XSS) vulnerability in the Wiki … |
Vulnerable |
|
GHSA-j5gv-w838-mmcx
Aliases: CVE-2023-44310 |
Liferay Portal and Liferay DXP Vulnerable to XSS via the Page Tree Menu Stored cross-site scripting (XSS) vulnerability in Page … |
Vulnerable |
|
GHSA-j663-6jpj-xx8c
Aliases: CVE-2023-44309 |
Liferay Portal and Liferay DXP Vulnerable to XSS in the Fragment Components Multiple stored cross-site scripting (XSS) vulnerabilities in the … |
Vulnerable |
|
CVE-2025-3760
Aliases: GHSA-qhp6-vp7c-g7xp |
Liferay Cross-site Scripting vulnerability A stored cross-site scripting (XSS) vulnerability exists with radio button type custom fields in Liferay Portal … | There are no reported fixed by versions. |
|
CVE-2025-43776
Aliases: GHSA-rcc7-jx7p-hrv4 |
Liferay Portal and Liferay DXP vulnerable to store Cross-site Scripting A stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 … | There are no reported fixed by versions. |
|
GHSA-qhp6-vp7c-g7xp
Aliases: CVE-2025-3760 |
Liferay Cross-site Scripting vulnerability A stored cross-site scripting (XSS) vulnerability exists with radio button type custom fields in Liferay Portal … | There are no reported fixed by versions. |
|
GHSA-222w-xmc5-jhp3
Aliases: CVE-2025-43735 |
Liferay Portal and Liferay DXP have a reflected cross-site scripting vulnerability A reflected cross-site scripting (XSS) vulnerability in the Liferay … | There are no reported fixed by versions. |
|
GHSA-cg99-m88x-422c
Aliases: CVE-2025-43736 |
Liferay Portal and Liferay DXP have a Denial Of Service via File Upload (DOS) vulnerability A Denial Of Service via … | There are no reported fixed by versions. |
|
GHSA-c6g5-g6r7-q4j6
Aliases: CVE-2025-4655 |
Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery An SSRF vulnerability in FreeMarker templates in Liferay Portal 7.4.0 … | There are no reported fixed by versions. |
|
GHSA-m5c7-5gv3-hcpf
Aliases: CVE-2025-43734 |
Liferay Portal 7.4.0 and Liferay DXP have a reflected cross-site scripting (XSS) vulnerability A reflected cross-site scripting (XSS) vulnerability in … |
Vulnerable Vulnerable |
|
GHSA-6v93-frf9-2rp8
Aliases: CVE-2025-4581 |
Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through … | There are no reported fixed by versions. |
|
GHSA-66x6-8jgv-qpfh
Aliases: CVE-2025-43785 |
Liferay Portal and Liferay DXP vulnerable to Stored Cross-site Scripting A stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.45 … | There are no reported fixed by versions. |
|
GHSA-rcc7-jx7p-hrv4
Aliases: CVE-2025-43776 |
Liferay Portal and Liferay DXP vulnerable to store Cross-site Scripting A stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 … | There are no reported fixed by versions. |
|
GHSA-r32w-v775-5952
Aliases: CVE-2022-42113 |
Liferay Portal and Liferay DXP Vulnerable to XSS via the Document Library Module A Cross-site scripting (XSS) vulnerability in Document … |
Vulnerable Vulnerable |
|
GHSA-7r3w-wggm-pjwf
Aliases: CVE-2022-28979 |
Liferay Portal and Liferay DXP Vulnerable to XSS in the Portal Search Module In Search Web before v6.0.19 in Liferay … | There are no reported fixed by versions. |
|
GHSA-h9ww-wjg4-jvvg
Aliases: CVE-2022-38512 |
Liferay Portal and Liferay DXP Fails to Check Permissions in Translation Module The Translation module before v2.0.58 from Liferay Portal … |
Vulnerable Vulnerable |
|
GHSA-q2cv-7j58-rfmj
Aliases: CVE-2023-47795 |
Liferay Portal Document and Media widget and Liferay DXP vulnerable to stored Cross-site Scripting Stored cross-site scripting (XSS) vulnerability in … | There are no reported fixed by versions. |
|
GHSA-73x3-8mrg-5r93
Aliases: CVE-2023-42498 |
Liferay Portal Language Override edit screen and Liferay DXP vulnerable to reflected Cross-site Scripting Reflected cross-site scripting (XSS) vulnerability in … | There are no reported fixed by versions. |
|
GHSA-54pv-r62j-9qqc
Aliases: CVE-2023-42496 |
Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting Reflected cross-site scripting (XSS) vulnerability on the add assignees to … | There are no reported fixed by versions. |
|
GHSA-rwhv-hvj2-qrqm
Aliases: CVE-2024-26269 |
Liferay Portal Frontend JS module's portlet.js and Liferay DXP vulnerable to Cross-site Scripting Cross-site scripting (XSS) vulnerability in the Frontend … |
Vulnerable Vulnerable |