Liferay vulnerabilities

CVEs per yearBy the year they were published

1. 202326
2. 202440
3. 2025144

Newest CVEs

• CVE-2025-62275

  Blogs in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10,…

  Liferay · Portal

  Medium6.9
• CVE-2025-62276

  The Document Library and the Adaptive Media modules in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0…

  Liferay · Portal

  Medium4.6
• CVE-2025-62267

  Multiple cross-site scripting (XSS) vulnerabilities in web content template’s select structure page in Liferay Portal 7.4.3.35 through 7.4.3.111, and Liferay…

  Liferay · Portal

  Medium4.6
• CVE-2025-62264

  Reflected cross-site scripting (XSS) vulnerability in Languauge Override in Liferay Portal 7.4.3.8 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through…

  Liferay · Portal

  Medium5.1
• CVE-2025-62265

  Cross-site scripting (XSS) vulnerability in the Blogs widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP…

  Liferay · Portal

  Medium4.8
• CVE-2025-62266

  By default, Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5, 2023.Q4.0 through 2023.Q4.10,…

  Liferay · Portal

  Medium5.1
• CVE-2025-62257

  Password enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5,…

  Liferay · Portal

  Medium6.3
• CVE-2025-62258

  CSRF vulnerability in Headless API in Liferay Portal 7.4.0 through 7.4.3.107, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA…

  Liferay · Portal

  High7.0
• CVE-2025-62259

  Liferay Portal 7.4.0 through 7.4.3.109, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through…

  Liferay · Portal

  Medium6.9
• CVE-2025-62260

  Liferay Portal 7.4.0 through 7.4.3.99, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported…

  Liferay · Portal

  High7.1