Skip to Main Content

Planned maintenance is scheduled for the week of June 15th - the exact date and time will be announced soon. See More Details

Blogs
Contribute
Meet
Security
Discuss
Download
Learn
Log In

Known Vulnerabilities

Sort By

Search Bar

Start filtering with some of the facets on the left, then if you need to, add search keywords below!

Selected Filter

Liferay DXP 2024.Q4 (52)

Affected Releases

Liferay DXP 7.2 (1)
Liferay DXP 7.3 (1)
Liferay DXP 7.4 (44)
Liferay DXP 2023.Q3 (3)
Liferay DXP 2023.Q4 (6)
Liferay DXP 2024.Q4 (52)
Liferay DXP 2024 Q1 (52)
Liferay DXP 2024 Q2 (52)
Liferay DXP 2024 Q3 (52)
Liferay DXP 2025.Q1 (37)
Liferay DXP 2025.Q2 (14)
Liferay DXP 2025.Q3 (2)
Liferay Portal 7.2 (1)
Liferay Portal 7.3 (1)
Liferay Portal 7.4 (50)

Fixed Versions

Liferay DXP 2024.Q1

Liferay DXP 2024.Q1.1 (1)
Liferay DXP 2024.Q1.13 (9)
Liferay DXP 2024.Q1.14 (2)
Liferay DXP 2024.Q1.15 (8)
Liferay DXP 2024.Q1.16 (8)
Liferay DXP 2024.Q1.17 (4)
Liferay DXP 2024.Q1.18 (2)
Liferay DXP 2024.Q1.19 (3)
Liferay DXP 2024.Q1.20 (7)
Liferay DXP 2024.Q1.21 (4)

Liferay DXP 2024.Q2

Liferay DXP 2024.Q2.0 (1)

Liferay DXP 2024.Q3

Liferay DXP 2024.Q3.10 (2)

Liferay DXP 2024.Q4

Liferay DXP 2024.Q4.0 (1)
Liferay DXP 2024.Q4.1 (2)
Liferay DXP 2024.Q4.2 (1)
Liferay DXP 2024.Q4.4 (2)
Liferay DXP 2024.Q4.5 (1)
Liferay DXP 2024.Q4.6 (3)
Liferay DXP 2024.Q4.7 (1)

Liferay DXP 2025.Q1

Liferay DXP 2025.Q1.0 (15)
Liferay DXP 2025.Q1.1 (1)
Liferay DXP 2025.Q1.2 (3)
Liferay DXP 2025.Q1.4 (2)
Liferay DXP 2025.Q1.5 (5)
Liferay DXP 2025.Q1.6 (3)
Liferay DXP 2025.Q1.7 (2)
Liferay DXP 2025.Q1.8 (1)
Liferay DXP 2025.Q1.9 (2)
Liferay DXP 2025.Q1.11 (2)
Liferay DXP 2025.Q1.14 (1)
Liferay DXP 2025.Q1.15 (3)
Liferay DXP 2025.Q1.16 (4)
Liferay DXP 2025.Q1.17 (5)

Liferay DXP 2025.Q2

Liferay DXP 2025.Q2.0 (24)
Liferay DXP 2025.Q2.1 (2)
Liferay DXP 2025.Q2.3 (2)
Liferay DXP 2025.Q2.6 (1)
Liferay DXP 2025.Q2.8 (1)
Liferay DXP 2025.Q2.9 (2)
Liferay DXP 2025.Q2.10 (4)
Liferay DXP 2025.Q2.12 (1)

Liferay DXP 2025.Q3

Liferay DXP 2025.Q3.0 (1)
Liferay DXP 2025.Q3.1 (1)
Liferay DXP 2025.Q3.3 (1)

Liferay Portal 7.4.3

Liferay Portal 7.4.3.132 (12)

Liferay DXP 2024.Q1.1 (1)
Liferay DXP 2024.Q1.13 (9)
Liferay DXP 2024.Q1.14 (2)
Liferay DXP 2024.Q1.15 (8)
Liferay DXP 2024.Q1.16 (8)
Liferay DXP 2024.Q1.17 (4)
Liferay DXP 2024.Q1.18 (2)
Liferay DXP 2024.Q1.19 (3)
Liferay DXP 2024.Q1.20 (7)
Liferay DXP 2024.Q1.21 (4)
Liferay DXP 2024.Q2.0 (1)
Liferay DXP 2024.Q3.10 (2)
Liferay DXP 2024.Q4.0 (1)
Liferay DXP 2024.Q4.1 (2)
Liferay DXP 2024.Q4.2 (1)
Liferay DXP 2024.Q4.4 (2)
Liferay DXP 2024.Q4.5 (1)
Liferay DXP 2024.Q4.6 (3)
Liferay DXP 2024.Q4.7 (1)
Liferay DXP 2025.Q1.0 (15)
Liferay DXP 2025.Q1.1 (1)
Liferay DXP 2025.Q1.2 (3)
Liferay DXP 2025.Q1.4 (2)
Liferay DXP 2025.Q1.5 (5)
Liferay DXP 2025.Q1.6 (3)
Liferay DXP 2025.Q1.7 (2)
Liferay DXP 2025.Q1.8 (1)
Liferay DXP 2025.Q1.9 (2)
Liferay DXP 2025.Q1.11 (2)
Liferay DXP 2025.Q1.14 (1)
Liferay DXP 2025.Q1.15 (3)
Liferay DXP 2025.Q1.16 (4)
Liferay DXP 2025.Q1.17 (5)
Liferay DXP 2025.Q2.0 (24)
Liferay DXP 2025.Q2.1 (2)
Liferay DXP 2025.Q2.3 (2)
Liferay DXP 2025.Q2.6 (1)
Liferay DXP 2025.Q2.8 (1)
Liferay DXP 2025.Q2.9 (2)
Liferay DXP 2025.Q2.10 (4)
Liferay DXP 2025.Q2.12 (1)
Liferay DXP 2025.Q3.0 (1)
Liferay DXP 2025.Q3.1 (1)
Liferay DXP 2025.Q3.3 (1)
Liferay Portal 7.4.3.132 (12)

Liferay Portal 7.4.0 through 7.4.3.131 Liferay DXP 2024.Q4.0 through 2024.Q4.1 Liferay DXP 2024.Q3.1 through 2024.Q3.13 Liferay DXP 2024.Q2.0 throguh 2024.Q2.13 Liferay DXP 2024.Q1.1 through...

Releases: Liferay Portal 7.4 Liferay DXP 7.4 Liferay DXP 2024 Q1 Liferay DXP 2024 Q2 Liferay DXP 2024 Q3 Liferay DXP 2024.Q4
Liferay DXP 2025.Q1.0 Liferay DXP 2024.Q1.15 Liferay DXP 2025.Q2.0 Username enumeration vulnerability in Liferay Portal and Liferay DXP allows attackers to determine if an account exist in the...

Releases: Liferay Portal 7.4 Liferay DXP 7.4 Liferay DXP 2024 Q1 Liferay DXP 2024 Q2 Liferay DXP 2024 Q3 Liferay DXP 2024.Q4
Liferay Portal 7.4.0 through 7.4.3.131 Liferay DXP 2024.Q4.0 through 2024.Q4.3 Liferay DXP 2024.Q3.1 through 2024.Q3.12 Liferay DXP 2024.Q2.0 through 2024.Q2.13 Liferay DXP 2024.Q1.1 through...

Releases: Liferay Portal 7.4 Liferay DXP 7.4 Liferay DXP 2024 Q1 Liferay DXP 2024 Q2 Liferay DXP 2024 Q3 Liferay DXP 2024.Q4
User enumeration vulnerability in Liferay Portal and Liferay DXP allows remote attackers to determine if an account exist in the application via the create account page. Liferay Portal 7.4.0...

Releases: Liferay Portal 7.4 Liferay DXP 2023.Q3 Liferay DXP 2023.Q4 Liferay DXP 2024 Q1 Liferay DXP 2024 Q2 Liferay DXP 2024 Q3 Liferay DXP 2024.Q4
A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal and Liferay DXP allows an remote non-authenticated attacker to inject JavaScript into the google_gadget. Liferay Portal...

Releases: Liferay Portal 7.4 Liferay DXP 7.4 Liferay DXP 2024 Q1 Liferay DXP 2024 Q2 Liferay DXP 2024 Q3 Liferay DXP 2024.Q4
Liferay Portal 7.4.3.132 Liferay Portal 7.4.3.132 Liferay DXP 2024.Q1.13 Liferay DXP 2024.Q4.5 Liferay DXP 2025.Q1.0 Liferay DXP 2024.Q4.5 Liferay DXP 2024.Q1.13 Liferay DXP 2025.Q1.0 A reflected...

Releases: Liferay Portal 7.4 Liferay DXP 7.4 Liferay DXP 2024 Q1 Liferay DXP 2024 Q2 Liferay DXP 2024 Q3 Liferay DXP 2024.Q4
The fragment preview functionality in Liferay Portal and Liferay DXP was found to be vulnerable to postMessage-based XSS because it allows a remote non-authenticated attacker to inject JavaScript...

Releases: Liferay Portal 7.4 Liferay DXP 7.4 Liferay DXP 2024 Q1 Liferay DXP 2024 Q2 Liferay DXP 2024 Q3 Liferay DXP 2024.Q4 Liferay DXP 2025.Q1
Liferay Portal fixed on master branch Liferay DXP 2025.Q2.0 Liferay DXP 2025.Q1.1 Liferay DXP 2024.Q1.15 Liferay Portal 7.4.0 through 7.4.3.132 Liferay DXP 2025.Q1.0 Liferay DXP 2024.Q4.0 through...

Releases: Liferay Portal 7.4 Liferay DXP 7.4 Liferay DXP 2024 Q1 Liferay DXP 2024 Q2 Liferay DXP 2024 Q3 Liferay DXP 2024.Q4
Liferay DXP 2025.Q2.0 Liferay Portal fixed on master branch Liferay DXP 2025.Q2.0 Liferay DXP 2025.Q1.2 Liferay DXP 2024.Q1.15 Liferay DXP 2024.Q1.15 Liferay DXP 2025.Q1.2 Liferay Portal and...

Releases: Liferay Portal 7.4 Liferay DXP 7.4 Liferay DXP 2024 Q1 Liferay DXP 2024 Q2 Liferay DXP 2024 Q3 Liferay DXP 2024.Q4 Liferay DXP 2025.Q1
Liferay Portal and Liferay DXP allow users to upload an unlimited amount of files through the forms, the files are stored in the document_library allowing an attacker to cause a potential DDoS....

Releases: Liferay Portal 7.4 Liferay DXP 7.4 Liferay DXP 2024 Q1 Liferay DXP 2024 Q2 Liferay DXP 2024 Q3 Liferay DXP 2024.Q4 Liferay DXP 2025.Q1
Liferay Portal fixed on master branch Liferay DXP 2025.Q2.0 Liferay DXP 2025.Q1.2 Liferay DXP 2024.Q1.15 Liferay Portal 7.4.0 through 7.4.3.132 Liferay DXP 2025.Q1.0 through 2025.Q1.1 Liferay DXP...

Releases: Liferay Portal 7.4 Liferay DXP 7.4 Liferay DXP 2024 Q1 Liferay DXP 2024 Q2 Liferay DXP 2024 Q3 Liferay DXP 2024.Q4 Liferay DXP 2025.Q1
This issue was reported by milCERT AT and Lucas Machado from Devoteam Cyber Trust A stored cross-site scripting (XSS) vulnerability exists with radio button type custom fields in Liferay Portal...

Releases: Liferay Portal 7.4 Liferay Portal 7.3 Liferay Portal 7.2 Liferay DXP 7.2 Liferay DXP 7.3 Liferay DXP 7.4 Liferay DXP 2023.Q3 Liferay DXP 2023.Q4 Liferay DXP 2024 Q1 Liferay DXP 2024 Q2 Liferay DXP 2024 Q3 Liferay DXP 2024.Q4

20 Entries per Page
40 Entries per Page
60 Entries per Page

Showing 41 to 52 of 52 entries.

1
2

Found a Bug?

If you have found, or think you have found a bug, help us to help you by letting us know!

Learn More >

Found a Security Vulnerability?

There's a different process available if you have a security issue to report...

Learn More >

Hall of Fame!

Raise your profile - report security vulnerabilities and enter the Hall of Fame!

Learn More >

Community

Company

Feedback

Blogs

Discuss

Meet

Open Source

Download

Events

Learn

Careers

Contact Us

Contribute

Copyright © 2026 Liferay, Inc

Powered by Liferay™

This Website Uses Cookies

This website uses cookies and similar tools, some of which are provided by third parties (together “tools”). These tools enable us and the third parties to access and record certain user-related and activity data and to track your interactions with this website. These tools and the information collected are used to operate and secure this website, enhance performance, enable certain website features and functionality, analyze and improve website performance, and personalize user experience. If you click "Accept All”, you allow the deployment of all these tools and collection of the information by us and the third parties for all these purposes. If you click “Decline All” your IP address and other information may still be collected but only by tools (including third party tools) that are necessary to operate, secure and enable default website features and functionalities. Review and change your preferences by clicking the “Configurations” at any time. Visit our Privacy Policy