Security
فارسی
All products

com.liferay.portal:com.liferay.portal.impl

Maven · Package
18 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Liferay Portal has stored cross-site scripting (XSS) vulnerabilityCVE-2025-43794 · GHSA-R45V-2289-JGR4 com.liferay.portal:com.liferay.portal.impl Maven Medium Fix reported
Liferay Portal ComboServlet denial of service via large file combinationCVE-2025-62254 · GHSA-Q95H-87J6-273X com.liferay.portal:com.liferay.portal.impl Maven Medium Fix reported
Liferay Portal and DXP use an incorrect cache-control headerCVE-2025-62276 · GHSA-6533-FHR2-F38H com.liferay.portal:com.liferay.portal.implcom.liferay:com.liferay.adaptive.media.web Maven Medium Fix reported
Liferay Portal Stores Password Reset Tokens in Plain TextCVE-2025-62261 · GHSA-XCJ6-XPJG-C4XR com.liferay.portal:com.liferay.portal.implcom.liferay.portal:release.portal.bom Maven Medium Fix reported
Liferay Portal reflected cross-site scripting (XSS) vulnerability in the google_gagetCVE-2025-62249 · GHSA-RX48-GQC2-4W47 com.liferay.portal:com.liferay.portal.impl Maven Medium No fix reported
Liferay is Vulnerable to Authorization Bypass Through User-Controlled KeyCVE-2025-62252 · GHSA-PFWQ-MR9G-GQ6M com.liferay.portal:com.liferay.portal.impl Maven Medium Fix reported
Liferay Portal vulnerable to path traversal and denial-of-service in the ComboServletCVE-2025-43813 · GHSA-2HM7-R8F3-423H com.liferay.portal:com.liferay.portal.implcom.liferay.portal:release.portal.bom Maven Medium Fix reported
Liferay Portal Cross-Site Request Forgery (CSRF) vulnerabilityCVE-2025-43809 · GHSA-697H-3Q6M-JWP4 com.liferay.portal:com.liferay.portal.impl Maven Medium Fix reported
Liferay Portal has unchecked input for loop condition vulnerability in XML-RPCCVE-2025-43801 · GHSA-95H4-8MQC-4MPF com.liferay.portal:com.liferay.portal.impl Maven Medium Fix reported
Liferay Portal has Improper Validation of Specified Quantity in InputCVE-2025-43793 · GHSA-XVGG-9H29-4G34 com.liferay.portal:com.liferay.portal.implcom.liferay.portal:com.liferay.portal.kernel Maven Medium Fix reported
Liferay Portal JSONWS API endpoint shares sensitive informationCVE-2025-43768 · GHSA-CV9J-MG9W-V7WM com.liferay.portal:com.liferay.portal.impl Maven Medium Fix reported
Liferay Portal and Liferay DXP have a reflected cross-site scripting vulnerabilityCVE-2025-43735 · GHSA-222W-XMC5-JHP3 com.liferay.portal:com.liferay.portal.implcom.liferay.portal:release.dxp.bom Maven Medium Fix reported
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery in Terms of Use PageCVE-2021-29050 · GHSA-MH9R-9PCX-RX55 com.liferay.portal:com.liferay.portal.implcom.liferay.portal:release.dxp.bom Maven High Fix reported
Liferay Portal Insecure Default Configuration in auth.login.prompt.enabledCVE-2022-41414 · GHSA-9427-7F65-88C8 com.liferay.portal:com.liferay.portal.implcom.liferay.portal:release.portal.bom Maven Medium Fix reported
Liferay Portal and Liferay DXP fails to check permissions to view sites/groupsCVE-2022-26595 · GHSA-822F-JFPG-HG7H com.liferay.portal:com.liferay.portal.implcom.liferay.portal:release.dxp.bom Maven Medium Fix reported
Liferay Portal and Liferay DXP insecure default configurationCVE-2021-33321 · GHSA-JFCH-M2X3-2V66 com.liferay.portal:com.liferay.portal.implcom.liferay.portal:release.portal.bom Maven High Fix reported
Liferay Portal and Liferay DXP fails to invalidate password reset tokens after useCVE-2021-33322 · GHSA-VWJ8-4GRF-3R8V com.liferay.portal:com.liferay.portal.implcom.liferay.portal:release.dxp.bom Maven High Fix reported
Liferay Portal and Liferay DXP Bypass via Double Encoded URLCVE-2020-15840 · GHSA-VRWX-Q9PJ-X488 com.liferay.portal:com.liferay.portal.implcom.liferay.portal:release.dxp.bom Maven Medium Fix reported