Liferay Latest Vulnerabilities
Latest vulnerabilities published by liferay
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Reflected Cross-Site Scripting Vulnerability in Liferay Portal and DXP
CVE-2025-4388LiferayPortal6.9MEDIUMStored Cross-Site Scripting Vulnerability in Liferay Portal and DXP
CVE-2025-3760LiferayPortal4.8MEDIUMData Exposure Vulnerability in Liferay Portal and DXP
CVE-2025-2565LiferayPortal5.1MEDIUMCross-Site Scripting Vulnerability in Liferay Portal and DXP Products
CVE-2025-2536LiferayPortal5.1MEDIUMCross-Site Scripting Vulnerability in Liferay Portal and DXP Products
CVE-2023-37940LiferayPortal4.8MEDIUMCross-Site Scripting Vulnerability in Liferay Portal and DXP Products
CVE-2024-11993LiferayPortal4.6MEDIUMCross-Site Request Forgery Vulnerability in Liferay Portal and DXP
CVE-2024-8980LiferayDigital Experience Pla...6.1MEDIUMCross-Site Request Forgery Vulnerability in Liferay Portal and DXP Products
CVE-2024-26273LiferayDigital Experience Pla...8.8HIGHWorkflow Component Vulnerability in Liferay Portal and DXP Products
CVE-2024-38002LiferayDigital Experience Pla...8.8HIGHCSRF Vulnerability in Liferay Portal and DXP Products
CVE-2024-26271LiferayDigital Experience Pla...8.8HIGHCross-Site Request Forgery Vulnerability in Liferay Portal and DXP
CVE-2024-26272LiferayDigital Experience Pla...8.8HIGHStored XSS vulnerability in Liferay Portal
CVE-2023-47795LiferayPortal5.4MEDIUMCalendar module vulnerability allows remote attackers to inject arbitrary web script or HTML via default notification email template
CVE-2024-25151LiferayPortal5.4MEDIUMLiferay Portal vulnerable to reflected XSS
CVE-2023-40191LiferayPortal6.1MEDIUMArbitrary Script Injection Vulnerability in Liferay Portal
CVE-2023-42498LiferayPortal6.1MEDIUMArbitrary Script Injection Vulnerability in Liferay Portal
CVE-2024-26269LiferayPortal9.6CRITICALCross-Site Scripting Vulnerabilities in Liferay Portal
CVE-2024-26266LiferayPortal5.4MEDIUMArbitrary Script Injection Vulnerability in Liferay Portal
CVE-2023-42496LiferayPortal6.1MEDIUMStored XSS vulnerability in Liferay Portal
CVE-2024-25603LiferayPortal5.4MEDIUMStored XSS vulnerability in Liferay Portal
CVE-2024-25152LiferayPortal5.4MEDIUMStored XSS vulnerability in geolocation custom fields
CVE-2024-25601LiferayPortal5.4MEDIUMStored XSS Vulnerability in Liferay Portal's Edit User Page
CVE-2024-25602LiferayPortal5.4MEDIUMCross-site Scripting (XSS) Vulnerability in Liferay Portal
CVE-2024-25147LiferayPortal9.6CRITICALLiferay Portal and DXP Vulnerabilities Allow Man-in-the-Middle Attackers to Steal Hashed Passwords
CVE-2024-26270LiferayPortal5.3MEDIUMUser Enumeration Vulnerability in Liferay Portal
CVE-2024-26268LiferayPortal5.3MEDIUM