Skip to Main Content

Planned maintenance is scheduled for the week of June 15th - the exact date and time will be announced soon. See More Details

Blogs
Contribute
Meet
Security
Discuss
Download
Learn
Log In

Known Vulnerabilities

Sort By

Search Bar

Start filtering with some of the facets on the left, then if you need to, add search keywords below!

Selected Filter

Liferay DXP 2023.Q3 (87)

Affected Releases

LIferay DXP 7.0 (14)
LIferay DXP 7.1 (25)
Liferay DXP 7.2 (30)
Liferay DXP 7.3 (52)
Liferay DXP 7.4 (81)
Liferay DXP 2023.Q3 (87)
Liferay DXP 2023.Q4 (69)
Liferay DXP 2024.Q4 (3)
Liferay DXP 2024 Q1 (15)
Liferay DXP 2024 Q2 (5)
Liferay DXP 2024 Q3 (5)
Liferay DXP 2025.Q1 (1)
Liferay Portal 6.2 CE (3)
Liferay Portal 7.0 (13)
Liferay Portal 7.1 (18)
Liferay Portal 7.2 (25)
Liferay Portal 7.3 (37)
Liferay Portal 7.4 (84)

Fixed Versions

Liferay DXP 7.3

Liferay DXP 7.3 U35 (2)
Liferay DXP 7.3 U36 (19)
Liferay DXP 7.3 update 34 (1)
Liferay DXP 7.3 Update 36 (6)
Liferay DXP 7.3 update 36 (2)

Liferay DXP 2023.Q3

Liferay DXP 2023.Q3.3 (1)
Liferay DXP 2023.Q3.5 (25)
Liferay DXP 2023.Q3.6 (11)
Liferay DXP 2023.Q3.7 (2)
Liferay DXP 2023.Q3.8 (3)
Liferay DXP 2023.Q3.9 (20)

Liferay DXP 2023.Q4

Liferay DXP 2023.Q4.0 (11)
Liferay DXP 2023.Q4.1 (12)
Liferay DXP 2023.Q4.3 (5)
Liferay DXP 2023.Q4.5 (5)
Liferay DXP 2023.Q4.6 (20)
Liferay DXP 2023.Q4.7 (2)
Liferay DXP 2023.Q4.8 (2)
Liferay DXP 2023.Q4.9 (5)

Liferay DXP 2024.Q1

Liferay DXP 2024.Q1.1 (65)
Liferay DXP 2024.Q1.3 (1)
Liferay DXP 2024.Q1.6 (4)
Liferay DXP 2024.Q1.7 (1)
Liferay DXP 2024.Q1.13 (4)
Liferay DXP 2024.Q1.15 (1)

Liferay DXP 2024.Q2

Liferay DXP 2024.Q2.0 (15)

Liferay DXP 2024.Q3

Liferay DXP 2024.Q3.0 (2)
Liferay DXP 2024.Q3.1 (2)
Liferay DXP 2024.Q3.10 (1)

Liferay DXP 2024.Q4

Liferay DXP 2024.Q4.0 (3)
Liferay DXP 2024.Q4.6 (1)

Liferay DXP 2025.Q1

Liferay DXP 2025.Q1.0 (2)
Liferay DXP 2025.Q1.5 (1)

Liferay DXP 2025.Q2

Liferay DXP 2025.Q2.0 (2)

Liferay Portal 7.4.3

Liferay Portal 7.4.3.43 (1)
Liferay Portal 7.4.3.98 (6)
Liferay Portal 7.4.3.100 (3)
Liferay Portal 7.4.3.102 (6)
Liferay Portal 7.4.3.104 (2)
Liferay Portal 7.4.3.106 (2)
Liferay Portal 7.4.3.108 (3)
Liferay Portal 7.4.3.110 (3)
Liferay Portal 7.4.3.111 (3)
Liferay Portal 7.4.3.112 (35)
Liferay Portal 7.4.3.113 (8)
Liferay Portal 7.4.3.118 (1)
Liferay Portal 7.4.3.120 (6)
Liferay Portal 7.4.3.129 (2)
Liferay Portal 7.4.3.132 (1)

Liferay DXP 7.3 U35 (2)
Liferay DXP 7.3 U36 (19)
Liferay DXP 7.3 update 34 (1)
Liferay DXP 7.3 Update 36 (6)
Liferay DXP 7.3 update 36 (2)
Liferay DXP 2023.Q3.3 (1)
Liferay DXP 2023.Q3.5 (25)
Liferay DXP 2023.Q3.6 (11)
Liferay DXP 2023.Q3.7 (2)
Liferay DXP 2023.Q3.8 (3)
Liferay DXP 2023.Q3.9 (20)
Liferay DXP 2023.Q4.0 (11)
Liferay DXP 2023.Q4.1 (12)
Liferay DXP 2023.Q4.3 (5)
Liferay DXP 2023.Q4.5 (5)
Liferay DXP 2023.Q4.6 (20)
Liferay DXP 2023.Q4.7 (2)
Liferay DXP 2023.Q4.8 (2)
Liferay DXP 2023.Q4.9 (5)
Liferay DXP 2024.Q1.1 (65)
Liferay DXP 2024.Q1.3 (1)
Liferay DXP 2024.Q1.6 (4)
Liferay DXP 2024.Q1.7 (1)
Liferay DXP 2024.Q1.13 (4)
Liferay DXP 2024.Q1.15 (1)
Liferay DXP 2024.Q2.0 (15)
Liferay DXP 2024.Q3.0 (2)
Liferay DXP 2024.Q3.1 (2)
Liferay DXP 2024.Q3.10 (1)
Liferay DXP 2024.Q4.0 (3)
Liferay DXP 2024.Q4.6 (1)
Liferay DXP 2025.Q1.0 (2)
Liferay DXP 2025.Q1.5 (1)
Liferay DXP 2025.Q2.0 (2)
Liferay Portal 7.4.3.43 (1)
Liferay Portal 7.4.3.98 (6)
Liferay Portal 7.4.3.100 (3)
Liferay Portal 7.4.3.102 (6)
Liferay Portal 7.4.3.104 (2)
Liferay Portal 7.4.3.106 (2)
Liferay Portal 7.4.3.108 (3)
Liferay Portal 7.4.3.110 (3)
Liferay Portal 7.4.3.111 (3)
Liferay Portal 7.4.3.112 (35)
Liferay Portal 7.4.3.113 (8)
Liferay Portal 7.4.3.118 (1)
Liferay Portal 7.4.3.120 (6)
Liferay Portal 7.4.3.129 (2)
Liferay Portal 7.4.3.132 (1)

Liferay Portal and Liferay DXP does not limit access to APIs before a user has verified their email address, which allows remote users to access and edit content via the API. Liferay DXP 2023.Q3.1...

Releases: Liferay Portal 7.4 Liferay Portal 7.3 Liferay Portal 7.2 Liferay Portal 7.1 Liferay Portal 7.0 LIferay DXP 7.1 Liferay DXP 7.2 Liferay DXP 7.3 LIferay DXP 7.0 Liferay DXP 2023.Q3
Liferay Portal 7.4.3.110 Liferay DXP 2024.Q1.1 Liferay DXP 2023.Q4.1 Liferay DXP 2023.Q3.5 Liferay DXP 7.3 Update 36 Liferay DXP 2023.Q3.1 through 2023.Q3.4 Liferay DXP 7.4 Update 51 through Update...

Releases: Liferay Portal 7.4 Liferay DXP 7.3 Liferay DXP 7.4 Liferay DXP 2023.Q3 Liferay DXP 2023.Q4 Liferay DXP 2024 Q1
Insecure Direct Object Reference (IDOR) vulnerability with account addresses in Liferay Portal and Liferay DXP allows remote authenticated users to from one account to view addresses from a...

Releases: Liferay Portal 7.4 Liferay DXP 7.4 Liferay DXP 2023.Q3 Liferay DXP 2023.Q4
This issue was reported by foobar7 Insecure direct object reference (IDOR) vulnerability in Publications in Liferay Portal and Liferay DXP allows remote authenticated attackers to view publication...

Releases: Liferay Portal 7.4 Liferay DXP 7.4 Liferay DXP 2023.Q3 Liferay DXP 2023.Q4
Stored cross-site scripting (XSS) vulnerability in Commerce’s view order page in Liferay Portal and Liferay DXP allows remote attackers to inject arbitrary web script or HTML via a crafted payload...

Releases: Liferay Portal 7.4 Liferay DXP 7.4 Liferay DXP 2023.Q3 Liferay DXP 2023.Q4
Liferay Portal 7.4.3.21 through 7.4.3.111 Liferay DXP 2023.Q4.0 through 2023.Q4.5 Liferay DXP 2023.Q3.1 through 2023.Q3.8 Liferay DXP 7.4 Update 21 through Update 92 Liferay Portal 7.4.3.112...

Releases: Liferay Portal 7.4 Liferay DXP 7.4 Liferay DXP 2023.Q3 Liferay DXP 2023.Q4
Liferay Portal 7.4.3.112 Liferay Portal 7.4.3.112 Liferay DXP 2024.Q1.1 Liferay DXP 2023.Q4.6 Liferay DXP 2023.Q3.9 Liferay DXP 2023.Q4.6 Liferay DXP 2024.Q1.1 Liferay DXP 2023.Q3.9 This issue was...

Releases: Liferay Portal 7.4 Liferay DXP 7.4 Liferay DXP 2023.Q3 Liferay DXP 2023.Q4
Stored cross-site scripting (XSS) vulnerability in diagram type products in Commerce in Liferay DXP allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected...

Releases: Liferay Portal 7.4 Liferay Portal 7.3 Liferay DXP 7.3 Liferay DXP 7.4 Liferay DXP 2023.Q3 Liferay DXP 2023.Q4
Liferay DXP 2023.Q4.6 Liferay DXP 2024.Q1.1 Liferay DXP 2023.Q3.9 This issue was reported by foobar7 Cross-site scripting (XSS) vulnerability in the Commerce Product Comparison Table widget in...

Releases: Liferay Portal 7.4 Liferay DXP 7.4 Liferay DXP 2023.Q3 Liferay DXP 2023.Q4
Liferay DXP 2023.Q4.6 Liferay DXP 2024.Q1.1 Liferay DXP 2023.Q3.9 This issue was reported by foobar7 Multiple stored cross-site scripting (XSS) vulnerabilities in Liferay DXP allow remote...

Releases: Liferay Portal 7.4 Liferay DXP 7.4 Liferay DXP 2023.Q3 Liferay DXP 2023.Q4
Liferay DXP 2023.Q3.9 This issue was reported by foobar7 Cross-site scripting (XSS) vulnerability in the Commerce Search Result widget in Liferay DXP allows remote attackers to inject arbitrary...

Releases: Liferay Portal 7.4 Liferay DXP 7.4 Liferay DXP 2023.Q3 Liferay DXP 2023.Q4
This issue was reported by foobar7 Multiple stored cross-site scripting (XSS) vulnerability in the related asset selector in Liferay Portal and Liferay DXP allows remote authenticated attackers to...

Releases: Liferay Portal 7.4 Liferay DXP 7.4 Liferay DXP 2023.Q3 Liferay DXP 2023.Q4
Multiple cross-site scripting (XSS) vulnerabilities with Calendar events in Liferay DXP allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a user’s...

Releases: Liferay Portal 7.4 Liferay DXP 7.3 Liferay DXP 7.4 Liferay DXP 2023.Q3 Liferay DXP 2023.Q4
Multiple cross-site scripting (XSS) vulnerabilities in the Calendar widget when inviting users to a event in Liferay DXP allow remote attackers to inject arbitrary web script or HTML via a crafted...

Releases: Liferay Portal 7.4 Liferay DXP 7.3 Liferay DXP 7.4 Liferay DXP 2023.Q3 Liferay DXP 2023.Q4
Cross-site scripting (XSS) vulnerability in the Calendar widget in Liferay DXP allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a Calendar's “Name”...

Releases: Liferay Portal 7.4 Liferay DXP 7.3 Liferay DXP 7.4 Liferay DXP 2023.Q3 Liferay DXP 2023.Q4
Severity 2 Cross-site request forgery (CSRF) vulnerability in the My Account widget in Liferay Portal and Liferay DXP allows remote attackers to (1) change user passwords, (2) shut down the server,...

Releases: Liferay Portal 7.4 Liferay DXP 7.3 Liferay DXP 7.4 Liferay DXP 2023.Q3 Liferay DXP 2023.Q4 Liferay DXP 2024 Q1
Cross-site request forgery (CSRF) vulnerability in the content page editor in Liferay Portal and Liferay DXP allows remote attackers to (1) change user passwords, (2) shut down the server, (3)...

Releases: Liferay Portal 7.4 Liferay DXP 7.3 Liferay DXP 7.4 Liferay DXP 2023.Q3 Liferay DXP 2023.Q4
Severity 2 Cross-site request forgery (CSRF) vulnerability in the content page editor in Liferay Portal and Liferay DXP allows remote attackers to (1) change user passwords, (2) shut down the...

Releases: Liferay Portal 7.4 Liferay Portal 7.3 Liferay DXP 7.3 Liferay DXP 7.4 Liferay DXP 2023.Q3 Liferay DXP 2023.Q4
Liferay Portal 7.4.3.102 through 7.4.3.110 Liferay DXP 2023.Q4.0 through 2023.Q4.2 Liferay DXP 2023.Q3.5 Liferay Portal 7.4.3.111 Liferay Portal 7.4.3.111 Liferay DXP 2024.Q1.1 Liferay DXP...

Releases: Liferay Portal 7.4 Liferay DXP 2023.Q3 Liferay DXP 2023.Q4
Liferay Portal 7.4.0 through 7.4.3.111 Liferay Portal 7.3.2 through 7.3.7 Liferay DXP 2023.Q4.0 through 2023.Q4.5 Liferay DXP 2023.Q3.1 through 2023.Q3.8 Liferay DXP 7.4 Liferay DXP 7.3 Liferay...

Releases: Liferay Portal 7.4 Liferay Portal 7.3 Liferay DXP 7.3 Liferay DXP 7.4 Liferay DXP 2023.Q3 Liferay DXP 2023.Q4

20 Entries per Page
40 Entries per Page
60 Entries per Page

Showing 61 to 80 of 87 entries.

1
2
3
4
5

Found a Bug?

If you have found, or think you have found a bug, help us to help you by letting us know!

Learn More >

Found a Security Vulnerability?

There's a different process available if you have a security issue to report...

Learn More >

Hall of Fame!

Raise your profile - report security vulnerabilities and enter the Hall of Fame!

Learn More >

Community

Company

Feedback

Blogs

Discuss

Meet

Open Source

Download

Events

Learn

Careers

Contact Us

Contribute

Copyright © 2026 Liferay, Inc

Powered by Liferay™

This Website Uses Cookies

This website uses cookies and similar tools, some of which are provided by third parties (together “tools”). These tools enable us and the third parties to access and record certain user-related and activity data and to track your interactions with this website. These tools and the information collected are used to operate and secure this website, enhance performance, enable certain website features and functionality, analyze and improve website performance, and personalize user experience. If you click "Accept All”, you allow the deployment of all these tools and collection of the information by us and the third parties for all these purposes. If you click “Decline All” your IP address and other information may still be collected but only by tools (including third party tools) that are necessary to operate, secure and enable default website features and functionalities. Review and change your preferences by clicking the “Configurations” at any time. Visit our Privacy Policy