Skip to content
OpenAdvisories

Package · Maven

com.liferay:com.liferay.portal.security.ldap.impl

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 4.6
    CVE-2025-62262

    Liferay Portal Vulnerable to Information Exposure Through a Log File Vulnerability in LDAP Import Feature

    Information exposure through log file vulnerability in LDAP import feature in Liferay Portal 7.4.0 through 7.4.3.97, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older uns…

    Liferay DXP Portal com.liferay:com.liferay.portal.security.ldap.impl Maven
  • High 7.5
    CVE-2021-38266

    Liferay Portal and Liferay DXP fails to properly import users from LDAP

    The Portal Security module in Liferay Portal 7.2.1 and earlier, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix pack 17 and 7.2 before fix pack 5 does not correctly import users from LDAP, which allows remote attackers to prevent a legitimate user from…

    com.liferay.portal:release.dxp.bom com.liferay:com.liferay.portal.security.ldap.impl Maven