com.liferay:com.liferay.users.admin.web

3 results · Clear filters · Feed

• Medium 5.1
  CVE-2025-43787

  Liferay Portal's selection modal is vulnerable to XSS

  A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q3.0, 2025.Q2.0 through 2025.Q2.12, 2025.Q1.0 through 2025.Q1.17, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024…

  Liferay DXP Portal com.liferay:com.liferay.users.admin.web Maven
  Sep 12, 2025
• Medium 6.9
  CVE-2025-43736

  Liferay Portal and Liferay DXP have a Denial Of Service via File Upload (DOS) vulnerability

  A Denial Of Service via File Upload (DOS) vulnerability in the Liferay Portal 7.4.3.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.8, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 20…

  Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  Aug 12, 2025
• Medium 6.3
  CVE-2021-29038

  Liferay Portal and Liferay DXP Does Not Obfuscate Password Reminder Answers

  Liferay Portal 7.2.0 through 7.3.5, and older unsupported versions, and Liferay DXP 7.3 before fix pack 1, 7.2 before fix pack 17, and older unsupported versions does not obfuscate password reminder answers on the page, which allows attackers to use man-in-th…

  com.liferay.portal:release.dxp.bom com.liferay:com.liferay.login.web com.liferay:com.liferay.users.admin.web com.liferay.portal:portal-impl Maven
  Feb 20, 2024