Skip to content
OpenAdvisories

Vendor

Liferay

210 known vulnerabilities.

Products

DXP 209 Portal 206 Liferay DXP < 7.4 update 86 0 Liferay Portal < 7.4.3.86 0 Liferay Portal < 7.4.3.96 0 Liferay DXP < 7.4 update 88 0 Liferay DXP < 7.4 update 54 0 Liferay DXP < 7.3 update 24 0 Liferay DXP < 7.4 update 90 0 Liferay DXP < 7.4 update 79 0 Liferay Portal < 7.4.3.54 0 Liferay Portal < 7.4.3.88 0 Liferay Portal < 7.4.3.79 0 Liferay Portal < 7.4.3.90 0 Liferay DXP < 7.4 update 92 0 Liferay Portal < 7.4.3.92 0 Liferay Portal 0
All Critical High Medium Low Exploited only Public exploit

210 results · Feed

  • Medium 6.2
    CVE-2025-43784

    Liferay Portal's Incorrect Authorization vulnerability can lead to guest users to obtaining sensitive data

    Improper Access Control vulnerability in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q2.0 through 2024.Q2.8, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows guest users to obtain object entries information via the API Builder.

    Liferay DXP Portal com.liferay:com.liferay.headless.builder.impl Maven
  • Medium 4.6
    CVE-2025-43785

    Liferay Portal and Liferay DXP vulnerable to Stored Cross-site Scripting

    Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.45 through 7.4.3.128, and Liferay DXP 2024 Q2.0 through 2024.Q2.9, 2024.Q1.1 through 2024.Q1.12, and 7.4 update 45 through update 92 allows remote attackers to execute an arbitrary web sc…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Medium 6.9
    CVE-2025-43786

    Liferay Portal exposes ERC which can lead to exploit the time response attack

    Enumeration of ERC from object entry in Liferay Portal 7.4.0 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.1, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 2023.Q4.0 and 7.4 GA through update 92 allow attackers to determine existe…

    Liferay DXP Portal com.liferay:com.liferay.portal.vulcan.impl Maven
  • Medium 5.3
    CVE-2025-43781

    Liferay Portal is vulnerable to XSS attack through its search bar portlet

    Reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.110 through 7.4.3.128, and Liferay DXP 2024.Q3.1 through 2024.Q3.8, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.12 allows remote attackers to inject arbitrary web script…

    Liferay DXP Portal com.liferay:com.liferay.portal.search.web Maven
  • Medium 4.6
    CVE-2025-43775

    Liferay Portal is vulnerable to XSS attacks via its remote app title field

    Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.5, 2024.Q2.0 through 2024.Q2.12, 2024.Q1.1 through 2024.Q1.12, and 7.4 GA through update 92 allows remote attackers to inject …

    Liferay DXP Portal com.liferay:com.liferay.client.extension.web Maven
  • Medium 4.6
    CVE-2025-43776

    Liferay Portal and Liferay DXP vulnerable to store Cross-site Scripting

    A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Medium 5.1
    CVE-2025-43777

    Liferay Portal exposes 500 status when attempting login with a deleted client secret

    Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.19 exposes "Internal Serve…

    Liferay DXP Portal com.liferay:com.liferay.portal.security.sso.openid.connect.impl Maven
  • Medium 4.8
    CVE-2025-43778

    Liferay Portal is vulnerable to XSS attack through fieldset name in Kaleo Forms Admin

    A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.11, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13 and …

    Liferay DXP Portal com.liferay:com.liferay.portal.workflow.kaleo.forms.web Maven
  • Medium 4.8
    CVE-2025-43763

    Liferay Portal is vulnerable to SSRF through custom object attachment fields

    A server-side request forgery (SSRF) vulnerability exist in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.20 that affects custo…

    Liferay DXP Portal com.liferay:com.liferay.object.service Maven
  • High 7.1
    CVE-2025-43772

    Liferay Portal Vulnerable to Denial of Service in Kaleo Forms Admin

    Kaleo Forms Admin in Liferay Portal 7.0.0 through 7.4.3.4, and Liferay DXP 7.4 GA, 7.3 GA through update 27, and older unsupported versions does not restrict the saving of request parameters in the portlet session, which allows remote attackers to consume sys…

    Liferay DXP Portal com.liferay:com.liferay.portal.workflow.kaleo.forms.web Maven
  • High 7.5
    CVE-2025-3586

    Liferay Portal and DXP Instance Admin can execute code using Objects Actions and Validations

    In Liferay Portal 7.4.3.27 through 7.4.3.42, and Liferay DXP 2024.Q1.1 through 2024.Q1.20, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 update 27 through update 42 (Liferay PaaS, and Liferay Self-Hosted), the Objects module does not restric…

    Liferay DXP Portal com.liferay:com.liferay.object.service Maven
  • Medium 4.6
    CVE-2025-43773

    Liferay Portal allows improper access through the expandoTableLocalService

    Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.18 and 7.4 GA through update 92 has a security …

    Liferay DXP Portal com.liferay:com.liferay.portal.workflow.kaleo.runtime.impl Maven
  • Medium 6.9
    CVE-2025-43764

    Liferay Portal ReDoS with Role Name search in KaleoDesignerPortlet

    Self-ReDoS (Regular expression Denial of Service) exists with Role Name search field of Kaleo Designer portlet JavaScript in Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.1, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.1 through 2…

    Liferay DXP Portal com.liferay:com.liferay.portal.workflow.kaleo.designer.web Maven
  • Medium 6.9
    CVE-2025-43765

    Liferay Portal stored cross-site scripting in text field of the web content structure

    A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.13 and 7.4 GA through update 92 allows an remote non-au…

    Liferay DXP Portal com.liferay:com.liferay.journal.service Maven
  • Medium 6.8
    CVE-2025-43766

    Liferay Portal allows unrestricted upload of file in the style books component

    The Liferay Portal 7.4.0 through 7.3.3.131, and Liferay DXP 2024.Q4.0, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows the upload of unrestricted files in the style books component t…

    Liferay DXP Portal com.liferay:com.liferay.style.book.web Maven
  • Medium 5.1
    CVE-2025-43767

    Liferay Portal allows open redirect in /c/portal/edit_info_item parameter redirect

    Open Redirect vulnerability in /c/portal/edit_info_item parameter redirect in Liferay Portal 7.4.3.86 through 7.4.3.131, and Liferay DXP 2024.Q3.1 through 2024.Q3.9, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 update 86 through update 9…

    Liferay DXP Portal com.liferay:com.liferay.info.impl Maven
  • Medium 5.1
    CVE-2025-43768

    Liferay Portal JSONWS API endpoint shares sensitive information

    Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allows authenticated users without any permissions to ac…

    Liferay DXP Portal com.liferay.portal:com.liferay.portal.impl Maven
  • Medium 4.6
    CVE-2025-43769

    Liferay Portal vulnerable to Stored XSS in Components portlet

    Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q3.1 through 2024.Q3.8, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows remote attackers to execute …

    Liferay DXP Portal com.liferay:com.liferay.plugins.admin.web Maven
  • Medium 6.9
    CVE-2025-43770

    Liferay Portal vulnerable to Reflected XSS with the referer and forward parameter

    A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.3, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update…

    Liferay DXP Portal com.liferay.portal:com.liferay.portal.kernel Maven
  • Medium 6.9
    CVE-2025-43761

    Liferay Portal Reflected XSS in CKeditor 4.21.0 endpoint

    A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.4, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update…

    Liferay DXP Portal com.liferay:com.liferay.frontend.editor.ckeditor.web npm Maven
  • Medium 6.7
    CVE-2025-43759

    Liferay Portal users are able to add system admin portlets to pages

    Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows admin users of a virtual instance to a…

    Liferay DXP Portal com.liferay:com.liferay.layout.impl Maven
  • Medium 5.3
    CVE-2025-43762

    Liferay Portal users can upload an unlimited amount of files

    Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.1, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allow users to upload an un…

    Liferay DXP Portal com.liferay:com.liferay.dynamic.data.mapping.form.field.type Maven
  • Medium 5.3
    CVE-2025-43758

    Liferay Portal's unauthenticated users can access loaded files via URL before submitting the object entry

    Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allows unauthenticated user…

    Liferay DXP Portal com.liferay:com.liferay.frontend.js.web Maven
  • Medium 5.3
    CVE-2025-43760

    Liferay Portal Reflected Cross-Site Scripting Vulnerability via PortalUtil.escapeRedirect

    A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4, 2024.Q4.0 through 2024.Q4.6, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Medium 6.9
    CVE-2025-43751

    Liferay Portal User Enumeration Vulnerability via the Create Account Page

    User enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 20…

    Liferay DXP Portal com.liferay:com.liferay.login.web Maven
  • Medium 5.3
    CVE-2025-43752

    Liferay Portal's Unlimited File Upload Could Result in DoS

    Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allow users to upload an un…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Low 2.1
    CVE-2025-43753

    Liferay Portal Reflected Cross-Site Scripting Vulnerability via Form Container

    A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.3.32 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.7, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1 through 2024…

    Liferay DXP Portal com.liferay:com.liferay.layout.taglib Maven
  • Medium 4.8
    CVE-2025-43747

    A server-side request forgery (SSRF) vulnerability exists in the Liferay DXP 2025.Q2.0 through 2025.Q2.3 due to insecur…

    Liferay DXP
  • Medium 6.9
    CVE-2025-43754

    Liferay Portal Username Enumeration Vulnerability

    Username enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows attackers t…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Medium 5.1
    CVE-2025-43755

    Liferay Portal Stored Cross-Site Scripting Vulnerability via GroupPagesPortlet_type Parameter

    A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 t through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.13, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 20…

    Liferay DXP Portal com.liferay:com.liferay.layout.admin.web Maven
  • Medium 6.9
    CVE-2025-43756

    Liferay Portal Reflected Cross-Site Scripting Vulnerability via snippet Parameter

    <!--td {border: 1px solid #cccccc;}br {mso-data-placement:same-cell;}-->A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.15, 2025.Q2.0 through 2025.Q2.2 and 2024.Q1.13 through 2024…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Medium 4.8
    CVE-2025-43757

    Liferay Portal Vulnerable to Cross-Site Scripting via DDMPortlet_definition Parameter

    A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.2, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Medium 5.1
    CVE-2025-43746

    Liferay Portal Vulnerable to Cross-Site Scripting in Dynamic Data Mapping

    A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.2, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • High 7.1
    CVE-2025-43748

    Liferay Portal Vulnerable to Cross-Site Request Forgery

    Insufficient CSRF protection for omni-administrator users in Liferay Portal 7.0.0 through 7.4.3.119, and Liferay DXP 2024.Q1.1 through 2024.Q1.6, 2023.Q4.0 through 2023.Q4.9, 2023.Q3.1 through 2023.Q3.9, 7.4 GA through update 92, 7.3 GA through update 36, and…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Medium 5.3
    CVE-2025-43749

    Liferay Portal Unauthenticated File Access via URL

    Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.1, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows unauthenticated user…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Medium 5.1
    CVE-2025-43750

    Liferay Portal Unvalidated File Upload

    Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.1, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows remote unauthenticat…

    Liferay DXP Portal com.liferay:com.liferay.dynamic.data.mapping.form.web Maven
  • Medium 5.1
    CVE-2025-43741

    Liferay Portal Vulnerable to Cross-Site Scripting via assetTagNames Parameter

    A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.3, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Medium 6.9
    CVE-2025-43742

    Liferay Portal Vulnerable to Cross-Site Scripting through URLs

    A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.3, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1…

    Liferay DXP Portal com.liferay:com.liferay.layout.type.controller.display.page Maven
  • Medium 5.1
    CVE-2025-43744

    Liferay Portal Vulnerable to Cross-Site Scripting via DDM Structure Field Labels

    A stored DOM-based Cross-Site Scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.5, 2025.Q1.0 through 2025.Q1.15, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Medium 5.3
    CVE-2025-43743

    Liferay Portal Enumeration Discrepancy in Calendars

    Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allows any authenticated re…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven