Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
com.liferay.portal:com.liferay.portal.kernel
Maven
· Package
6 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Liferay Portal defaults to a low work factor for the default password hashing algorithm
CVE-2024-25607 · GHSA-43H9-P3J4-39HM
com.liferay.portal:com.liferay.portal.kernel
com.liferay.portal:release.dxp.bom
Maven
High
Fix reported
2026-09-10
Deserialization of Untrusted Data in Liferay Portal
CVE-2020-7961 · GHSA-W7PM-CC4V-F3G8
com.liferay.portal:com.liferay.portal.kernel
Maven
Critical
Fix reported
2025-10-22
Liferay Portal has External Control of System or Configuration Settings
CVE-2025-43792 · GHSA-VP64-77C6-33H8
com.liferay.portal:com.liferay.portal.kernel
Maven
Low
Fix reported
2025-09-16
Liferay Portal has Improper Validation of Specified Quantity in Input
CVE-2025-43793 · GHSA-XVGG-9H29-4G34
com.liferay.portal:com.liferay.portal.impl
com.liferay.portal:com.liferay.portal.kernel
Maven
Medium
Fix reported
2025-09-16
Liferay Portal vulnerable to Reflected XSS with the referer and forward parameter
CVE-2025-43770 · GHSA-H4M4-XP33-37MJ
com.liferay.portal:com.liferay.portal.kernel
Maven
Medium
Fix reported
2025-08-25
Liferay Portal SessionClicks does not restrict the saving of request parameters in the HTTP session
CVE-2025-3526 · GHSA-MF3R-6M25-3867
com.liferay.portal:com.liferay.portal.kernel
Maven
High
Fix reported
2025-06-16
