Product by Liferay

Liferay DXP

264 known vulnerabilities in Liferay DXP (Liferay), 0 of them actively exploited (CISA KEV).

264

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Liferay DXP (Liferay)

Critical	CVE-2023-42627	Liferay DXP: Cross-site Scripting also in 3 other products	9.6	17.10.2023
Critical	CVE-2023-42628	Liferay DXP: Cross-site Scripting also in 3 other products	9.0	17.10.2023
Critical	CVE-2023-42629	Liferay DXP: Cross-site Scripting also in 3 other products	9.0	17.10.2023
Medium	CVE-2025-4388	Liferay Portal: Cross-site Scripting also in 3 other products	6.1	06.05.2025
High	CVE-2020-15842	Liferay Portal: Deserialization of Untrusted Data also in 1 other product	8.1	20.07.2020
Medium	CVE-2020-15839	Liferay Portal: Denial of Service also in 1 other product	6.5	22.09.2020
High	CVE-2021-38266	Liferay Portal: security vulnerability also in 1 other product	7.5	02.03.2022
High	CVE-2020-15841	Liferay Portal: security vulnerability also in 1 other product	8.3	20.07.2020
Critical	CVE-2025-3594	Liferay Portal: Path Traversal also in 3 other products	9.8	16.06.2025
High	CVE-2022-42124	Liferay Portal: security vulnerability also in 1 other product	7.5	15.11.2022
High	CVE-2022-42121	Liferay DXP: SQL Injection also in 2 other products	8.8	15.11.2022
High	CVE-2021-33335	Liferay Portal: Privilege Escalation also in 1 other product	7.2	03.08.2021
High	CVE-2021-33322	Liferay Portal: security vulnerability also in 1 other product	7.5	03.08.2021
High	CVE-2025-3526	Liferay Portal: Uncontrolled Resource Consumption also in 3 other products	7.5	16.06.2025
Critical	CVE-2024-38002	Liferay Portal: Missing Authorization also in 3 other products	9.0	22.10.2024
Critical	CVE-2023-42498	Liferay Portal: Cross-site Scripting also in 3 other products	9.6	21.02.2024
Critical	CVE-2023-42496	Liferay Portal: Cross-site Scripting also in 3 other products	9.6	21.02.2024
Critical	CVE-2025-43766	Liferay Portal: Unrestricted Upload of File with Dangerous Type also in 3 other products	9.8	23.08.2025
Critical	CVE-2024-25145	Liferay Portal: Cross-site Scripting also in 3 other products	9.6	07.02.2024
High	CVE-2021-33323	Liferay Portal: security vulnerability also in 1 other product	7.5	03.08.2021
Critical	CVE-2024-26269	Liferay Portal: Cross-site Scripting also in 3 other products	9.6	21.02.2024
Critical	CVE-2024-25147	Liferay Portal: Cross-site Scripting also in 3 other products	9.6	21.02.2024
Critical	CVE-2023-44311	Liferay DXP: Cross-site Scripting also in 3 other products	9.6	17.10.2023
Critical	CVE-2023-42497	Liferay DXP: Cross-site Scripting also in 3 other products	9.6	17.10.2023
Critical	CVE-2023-40191	Liferay Portal: Cross-site Scripting also in 3 other products	9.0	21.02.2024

All vulnerabilities in search

All products by Liferay

Key figures

Vulnerabilities