Skip to Main Content

Planned maintenance is scheduled for the week of June 15th - the exact date and time will be announced soon. See More Details

Blogs
Contribute
Meet
Security
Discuss
Download
Learn
Log In

Known Vulnerabilities

Sort By

Search Bar

Start filtering with some of the facets on the left, then if you need to, add search keywords below!

Selected Filter

Liferay DXP 7.3 (92)

Affected Releases

LIferay DXP 7.0 (18)
LIferay DXP 7.1 (31)
Liferay DXP 7.2 (64)
Liferay DXP 7.3 (92)
Liferay DXP 7.4 (77)
Liferay DXP 2023.Q3 (52)
Liferay DXP 2023.Q4 (40)
Liferay DXP 2024.Q4 (1)
Liferay DXP 2024 Q1 (9)
Liferay DXP 2024 Q2 (1)
Liferay DXP 2024 Q3 (1)
Liferay Portal 6.2 CE (5)
Liferay Portal 7.0 (16)
Liferay Portal 7.1 (24)
Liferay Portal 7.2 (59)
Liferay Portal 7.3 (75)
Liferay Portal 7.4 (88)

Fixed Versions

Liferay DXP 7.1

Liferay DXP 7.1 fix pack 27 (1)

Liferay DXP 7.2

Liferay DXP 7.2 fix pack 11 (1)
Liferay DXP 7.2 fix pack 13 (1)
Liferay DXP 7.2 fix pack 15 (4)
Liferay DXP 7.2 fix pack 17 (10)
Liferay DXP 7.2 fix pack 18 (2)
Liferay DXP 7.2 fix pack 19 (8)
Liferay DXP 7.2 fix pack 20 (3)

Liferay DXP 7.3

Liferay DXP 7.3 fix pack 2 (1)
Liferay DXP 7.3 fix pack 14 (1)
Liferay DXP 7.3 service pack 1 (2)
Liferay DXP 7.3 service pack 3 (10)
Liferay DXP 7.3 U35 (2)
Liferay DXP 7.3 U36 (16)
Liferay DXP 7.3 update 4 (10)
Liferay DXP 7.3 update 5 (1)
Liferay DXP 7.3 update 6 (3)
Liferay DXP 7.3 update 8 (1)
Liferay DXP 7.3 update 11 (1)
Liferay DXP 7.3 update 12 (1)
Liferay DXP 7.3 update 24 (2)
Liferay DXP 7.3 Update 26 (1)
Liferay DXP 7.3 update 28 (1)
Liferay DXP 7.3 update 30 (1)
Liferay DXP 7.3 update 34 (2)
Liferay DXP 7.3 Update 35 (1)
Liferay DXP 7.3 Update 36 (6)
Liferay DXP 7.3 update 36 (2)

Liferay DXP 7.4

Liferay DXP 7.4 update 1 (4)
Liferay DXP 7.4 update 4 (1)
Liferay DXP 7.4 update 8 (1)
Liferay DXP 7.4 update 9 (3)
Liferay DXP 7.4 update 10 (1)
Liferay DXP 7.4 Update 10 (1)
Liferay DXP 7.4 update 16 (3)
Liferay DXP 7.4 update 18 (1)
Liferay DXP 7.4 update 19 (1)
Liferay DXP 7.4 update 26 (1)
Liferay DXP 7.4 update 27 (2)
Liferay DXP 7.4 update 38 (1)
Liferay DXP 7.4 Update 39 (1)
Liferay DXP 7.4 update 69 (1)
Liferay DXP 7.4 update 79 (1)
Liferay DXP 7.4 update 88 (2)
Liferay DXP 7.4 update 92 (1)

Liferay DXP 2023.Q3

Liferay DXP 2023.Q3.1 (1)
Liferay DXP 2023.Q3.3 (1)
Liferay DXP 2023.Q3.5 (18)
Liferay DXP 2023.Q3.6 (6)
Liferay DXP 2023.Q3.7 (2)
Liferay DXP 2023.Q3.8 (2)
Liferay DXP 2023.Q3.9 (10)

Liferay DXP 2023.Q4

Liferay DXP 2023.Q4.0 (10)
Liferay DXP 2023.Q4.1 (8)
Liferay DXP 2023.Q4.3 (4)
Liferay DXP 2023.Q4.5 (3)
Liferay DXP 2023.Q4.6 (10)
Liferay DXP 2023.Q4.7 (1)
Liferay DXP 2023.Q4.8 (1)
Liferay DXP 2023.Q4.9 (3)

Liferay DXP 2024.Q1

Liferay DXP 2024.Q1.1 (41)
Liferay DXP 2024.Q1.3 (1)
Liferay DXP 2024.Q1.6 (4)
Liferay DXP 2024.Q1.7 (1)
Liferay DXP 2024.Q1.13 (1)

Liferay DXP 2024.Q2

Liferay DXP 2024.Q2.0 (10)

Liferay DXP 2024.Q3

Liferay DXP 2024.Q3.0 (1)
Liferay DXP 2024.Q3.10 (1)

Liferay DXP 2024.Q4

Liferay DXP 2024.Q4.0 (1)

Liferay DXP 2025.Q1

Liferay DXP 2025.Q1.0 (1)

Liferay Portal 7.3

Liferay Portal 7.3.6 (2)
Liferay Portal 7.3.7 (1)

Liferay Portal 7.4

Liferay Portal 7.4.1 (1)
Liferay Portal 7.4.2 (4)
Liferay Portal 7.4.3.4 (5)
Liferay Portal 7.4.3.5 (5)
Liferay Portal 7.4.3.8 (1)
Liferay Portal 7.4.3.12 (1)
Liferay Portal 7.4.3.13 (3)
Liferay Portal 7.4.3.14 (2)
Liferay Portal 7.4.3.16 (2)
Liferay Portal 7.4.3.18 (1)
Liferay Portal 7.4.3.19 (1)
Liferay Portal 7.4.3.22 (1)
Liferay Portal 7.4.3.26 (1)
Liferay Portal 7.4.3.27 (2)
Liferay Portal 7.4.3.38 (1)
Liferay Portal 7.4.3.39 (1)
Liferay Portal 7.4.3.69 (1)
Liferay Portal 7.4.3.79 (1)
Liferay Portal 7.4.3.88 (2)
Liferay Portal 7.4.3.92 (1)
Liferay Portal 7.4.3.98 (4)
Liferay Portal 7.4.3.100 (2)
Liferay Portal 7.4.3.102 (4)
Liferay Portal 7.4.3.104 (2)
Liferay Portal 7.4.3.108 (3)
Liferay Portal 7.4.3.110 (3)
Liferay Portal 7.4.3.111 (2)
Liferay Portal 7.4.3.112 (19)
Liferay Portal 7.4.3.113 (3)
Liferay Portal 7.4.3.118 (1)
Liferay Portal 7.4.3.120 (6)
Liferay Portal 7.4.3.132 (1)

Liferay Portal 7.4.3

Liferay Portal 7.4.3.4 (5)
Liferay Portal 7.4.3.5 (5)
Liferay Portal 7.4.3.8 (1)
Liferay Portal 7.4.3.12 (1)
Liferay Portal 7.4.3.13 (3)
Liferay Portal 7.4.3.14 (2)
Liferay Portal 7.4.3.16 (2)
Liferay Portal 7.4.3.18 (1)
Liferay Portal 7.4.3.19 (1)
Liferay Portal 7.4.3.22 (1)
Liferay Portal 7.4.3.26 (1)
Liferay Portal 7.4.3.27 (2)
Liferay Portal 7.4.3.38 (1)
Liferay Portal 7.4.3.39 (1)
Liferay Portal 7.4.3.69 (1)
Liferay Portal 7.4.3.79 (1)
Liferay Portal 7.4.3.88 (2)
Liferay Portal 7.4.3.92 (1)
Liferay Portal 7.4.3.98 (4)
Liferay Portal 7.4.3.100 (2)
Liferay Portal 7.4.3.102 (4)
Liferay Portal 7.4.3.104 (2)
Liferay Portal 7.4.3.108 (3)
Liferay Portal 7.4.3.110 (3)
Liferay Portal 7.4.3.111 (2)
Liferay Portal 7.4.3.112 (19)
Liferay Portal 7.4.3.113 (3)
Liferay Portal 7.4.3.118 (1)
Liferay Portal 7.4.3.120 (6)
Liferay Portal 7.4.3.132 (1)

Liferay DXP 7.1 fix pack 27 (1)
Liferay DXP 7.2 fix pack 11 (1)
Liferay DXP 7.2 fix pack 13 (1)
Liferay DXP 7.2 fix pack 15 (4)
Liferay DXP 7.2 fix pack 17 (10)
Liferay DXP 7.2 fix pack 18 (2)
Liferay DXP 7.2 fix pack 19 (8)
Liferay DXP 7.2 fix pack 20 (3)
Liferay DXP 7.3 fix pack 2 (1)
Liferay DXP 7.3 fix pack 14 (1)
Liferay DXP 7.3 service pack 1 (2)
Liferay DXP 7.3 service pack 3 (10)
Liferay DXP 7.3 U35 (2)
Liferay DXP 7.3 U36 (16)
Liferay DXP 7.3 update 4 (10)
Liferay DXP 7.3 update 5 (1)
Liferay DXP 7.3 update 6 (3)
Liferay DXP 7.3 update 8 (1)
Liferay DXP 7.3 update 11 (1)
Liferay DXP 7.3 update 12 (1)
Liferay DXP 7.3 update 24 (2)
Liferay DXP 7.3 Update 26 (1)
Liferay DXP 7.3 update 28 (1)
Liferay DXP 7.3 update 30 (1)
Liferay DXP 7.3 update 34 (2)
Liferay DXP 7.3 Update 35 (1)
Liferay DXP 7.3 Update 36 (6)
Liferay DXP 7.3 update 36 (2)
Liferay DXP 7.4 update 1 (4)
Liferay DXP 7.4 update 4 (1)
Liferay DXP 7.4 update 8 (1)
Liferay DXP 7.4 update 9 (3)
Liferay DXP 7.4 update 10 (1)
Liferay DXP 7.4 Update 10 (1)
Liferay DXP 7.4 update 16 (3)
Liferay DXP 7.4 update 18 (1)
Liferay DXP 7.4 update 19 (1)
Liferay DXP 7.4 update 26 (1)
Liferay DXP 7.4 update 27 (2)
Liferay DXP 7.4 update 38 (1)
Liferay DXP 7.4 Update 39 (1)
Liferay DXP 7.4 update 69 (1)
Liferay DXP 7.4 update 79 (1)
Liferay DXP 7.4 update 88 (2)
Liferay DXP 7.4 update 92 (1)
Liferay DXP 2023.Q3.1 (1)
Liferay DXP 2023.Q3.3 (1)
Liferay DXP 2023.Q3.5 (18)
Liferay DXP 2023.Q3.6 (6)
Liferay DXP 2023.Q3.7 (2)
Liferay DXP 2023.Q3.8 (2)
Liferay DXP 2023.Q3.9 (10)
Liferay DXP 2023.Q4.0 (10)
Liferay DXP 2023.Q4.1 (8)
Liferay DXP 2023.Q4.3 (4)
Liferay DXP 2023.Q4.5 (3)
Liferay DXP 2023.Q4.6 (10)
Liferay DXP 2023.Q4.7 (1)
Liferay DXP 2023.Q4.8 (1)
Liferay DXP 2023.Q4.9 (3)
Liferay DXP 2024.Q1.1 (41)
Liferay DXP 2024.Q1.3 (1)
Liferay DXP 2024.Q1.6 (4)
Liferay DXP 2024.Q1.7 (1)
Liferay DXP 2024.Q1.13 (1)
Liferay DXP 2024.Q2.0 (10)
Liferay DXP 2024.Q3.0 (1)
Liferay DXP 2024.Q3.10 (1)
Liferay DXP 2024.Q4.0 (1)
Liferay DXP 2025.Q1.0 (1)
Liferay Portal 7.3.6 (2)
Liferay Portal 7.3.7 (1)
Liferay Portal 7.4.1 (1)
Liferay Portal 7.4.2 (4)
Liferay Portal 7.4.3.4 (5)
Liferay Portal 7.4.3.5 (5)
Liferay Portal 7.4.3.12 (1)
Liferay Portal 7.4.3.13 (3)
Liferay Portal 7.4.3.14 (2)
Liferay Portal 7.4.3.16 (2)
Liferay Portal 7.4.3.18 (1)
Liferay Portal 7.4.3.19 (1)
Liferay Portal 7.4.3.22 (1)
Liferay Portal 7.4.3.26 (1)
Liferay Portal 7.4.3.27 (2)
Liferay Portal 7.4.3.38 (1)
Liferay Portal 7.4.3.39 (1)
Liferay Portal 7.4.3.88 (2)
Liferay Portal 7.4.3.98 (4)
Liferay Portal 7.4.3.100 (2)
Liferay Portal 7.4.3.102 (4)
Liferay Portal 7.4.3.104 (2)
Liferay Portal 7.4.3.108 (3)
Liferay Portal 7.4.3.110 (3)
Liferay Portal 7.4.3.111 (2)
Liferay Portal 7.4.3.112 (19)
Liferay Portal 7.4.3.113 (3)
Liferay Portal 7.4.3.118 (1)
Liferay Portal 7.4.3.120 (6)
Liferay Portal 7.4.3.132 (1)

Severity 1 Stored cross-site scripting (XSS) vulnerability in the Portal Search module's Search Result app in Liferay Portal and Liferay DXP allows remote authenticated users to inject arbitrary...

Releases: Liferay Portal 7.4 Liferay Portal 7.3 Liferay Portal 7.2 Liferay DXP 7.2 Liferay DXP 7.3 Liferay DXP 7.4
Severity 2 The IFrame widget in Liferay Portal and Liferay DXP does not check the URL of the IFrame, which allows remote authenticated users to cause a denial-of-service (DoS) via a self...

Releases: Liferay Portal 7.4 Liferay Portal 7.3 Liferay Portal 7.2 Liferay DXP 7.2 Liferay DXP 7.3 Liferay DXP 7.4
The Document and Media widget In Liferay Portal and Liferay DXP, does not limit resource consumption when generating a preview image, which allows remote authenticated users to cause a denial of...

Releases: Liferay Portal 7.3 Liferay Portal 7.2 Liferay DXP 7.2 Liferay DXP 7.3
Severity 2 A Cross-Site Request Forgery (CSRF) vulnerability in the terms of use page in Liferay DXP and Liferay Portal allows remote attackers to accept the site's terms of use via social...

Releases: Liferay Portal 7.3 Liferay Portal 7.2 Liferay DXP 7.2 Liferay DXP 7.3
Severity 2 Liferay Portal 7.3.6 Liferay DXP 7.3 service pack 1 Liferay DXP 7.2 fix pack 17 Liferay Portal 7.3.0 through 7.3.5 Liferay Portal 7.2.0 and 7.2.1 Liferay Portal, older unsupported...

Releases: Liferay Portal 7.3 Liferay Portal 7.2 Liferay DXP 7.2 Liferay DXP 7.3
Liferay DXP 7.3 update 24 Liferay DXP 7.3 update 24 Liferay DXP 7.4 update 79 Liferay Portal 7.4.3.79 Liferay Portal 7.4.3.79 Liferay DXP 7.4 update 79 Severity 2 Stored cross-site scripting (XSS)...

Releases: Liferay Portal 7.4 Liferay Portal 7.3 Liferay DXP 7.3 Liferay DXP 7.4
Liferay Portal 7.4.3.92 This issue was reported by Michael Oelke Severity 1 Multiple stored cross-site scripting (XSS) vulnerabilities in the Commerce module in Liferay Portal and Liferay DXP allow...

Releases: Liferay Portal 7.4 Liferay Portal 7.3 Liferay DXP 7.3 Liferay DXP 7.4
Severity 1 Stored cross-site scripting (XSS) vulnerability in the Wiki widget in Liferay Portal and Liferay DXP allows remote attackers to inject arbitrary web script or HTML into a parent wiki...

Releases: Liferay Portal 7.4 Liferay Portal 7.3 Liferay Portal 7.2 Liferay Portal 7.1 LIferay DXP 7.1 Liferay DXP 7.2 Liferay DXP 7.3 Liferay DXP 7.4 LIferay DXP 7.0
Severity 2 Liferay DXP 7.3 update 6 Liferay DXP 7.4 update 18 Liferay Portal 7.4.3.18 Liferay DXP 7.3 before update 6 Liferay DXP 7.4 before update 18 Liferay Portal 7.3.1 - 7.3.7 Liferay Portal...

Releases: Liferay Portal 7.4 Liferay Portal 7.3 Liferay DXP 7.3 Liferay DXP 7.4
Liferay DXP 7.3 update 24 Liferay DXP 7.3 update 24 Liferay DXP 7.4 update 69 Liferay Portal 7.4.3.69 Liferay Portal 7.4.3.69 Liferay DXP 7.4 update 69 Severity 2 Cross-site scripting (XSS)...

Releases: Liferay Portal 7.4 Liferay Portal 7.3 Liferay DXP 7.3 Liferay DXP 7.4
Cross-site scripting (XSS) vulnerability in the Modified Facet widget in Liferay Portal and Liferay DXP allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected...

Releases: Liferay Portal 7.4 Liferay Portal 7.3 Liferay Portal 7.2 Liferay Portal 7.1 LIferay DXP 7.1 Liferay DXP 7.2 Liferay DXP 7.3 Liferay DXP 7.4
Severity 2 Cross-site scripting (XSS) vulnerability in the App Builder module's custom object details page in Liferay Portal and Liferay DXP allows remote attackers to inject arbitrary web script...

Releases: Liferay Portal 7.4 Liferay Portal 7.3 Liferay DXP 7.3

20 Entries per Page
40 Entries per Page
60 Entries per Page

Showing 81 to 92 of 92 entries.

1
2
3
4
5

Found a Bug?

If you have found, or think you have found a bug, help us to help you by letting us know!

Learn More >

Found a Security Vulnerability?

There's a different process available if you have a security issue to report...

Learn More >

Hall of Fame!

Raise your profile - report security vulnerabilities and enter the Hall of Fame!

Learn More >

Community

Company

Feedback

Blogs

Discuss

Meet

Open Source

Download

Events

Learn

Careers

Contact Us

Contribute

Copyright © 2026 Liferay, Inc

Powered by Liferay™

This Website Uses Cookies

This website uses cookies and similar tools, some of which are provided by third parties (together “tools”). These tools enable us and the third parties to access and record certain user-related and activity data and to track your interactions with this website. These tools and the information collected are used to operate and secure this website, enhance performance, enable certain website features and functionality, analyze and improve website performance, and personalize user experience. If you click "Accept All”, you allow the deployment of all these tools and collection of the information by us and the third parties for all these purposes. If you click “Decline All” your IP address and other information may still be collected but only by tools (including third party tools) that are necessary to operate, secure and enable default website features and functionalities. Review and change your preferences by clicking the “Configurations” at any time. Visit our Privacy Policy