Product by Liferay

Liferay DXP

242 known vulnerabilities in Liferay DXP (Liferay), 0 of them actively exploited (CISA KEV).

242

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Liferay DXP (Liferay)

Critical	CVE-2023-42627	Liferay DXP: Cross-site Scripting also in 3 other products	9.6	17.10.2023
Critical	CVE-2023-42628	Liferay DXP: Cross-site Scripting also in 3 other products	9.0	17.10.2023
Critical	CVE-2023-42629	Liferay DXP: Cross-site Scripting also in 3 other products	9.0	17.10.2023
Medium	CVE-2025-4388	Liferay Portal: Cross-site Scripting also in 3 other products	6.1	06.05.2025
Critical	CVE-2025-3594	Liferay Portal: Path Traversal also in 3 other products	9.8	16.06.2025
High	CVE-2021-33321	Liferay DXP: security vulnerability also in 1 other product	7.5	03.08.2021
High	CVE-2021-29053	Liferay DXP: SQL Injection also in 1 other product	8.8	17.05.2021
High	CVE-2022-42121	Liferay DXP: SQL Injection also in 2 other products	8.8	15.11.2022
Critical	CVE-2022-42120	Liferay DXP: SQL Injection also in 1 other product	9.8	15.11.2022
Critical	CVE-2022-42122	Liferay DXP: SQL Injection also in 1 other product	9.8	15.11.2022
High	CVE-2025-3526	Liferay Portal: Uncontrolled Resource Consumption also in 3 other products	7.5	16.06.2025
Critical	CVE-2024-38002	Liferay Portal: Missing Authorization also in 3 other products	9.0	22.10.2024
Critical	CVE-2023-42498	Liferay Portal: Cross-site Scripting also in 3 other products	9.6	21.02.2024
Critical	CVE-2023-42496	Liferay Portal: Cross-site Scripting also in 3 other products	9.6	21.02.2024
Critical	CVE-2025-43766	Liferay Portal: Unrestricted Upload of File with Dangerous Type also in 3 other products	9.8	23.08.2025
High	CVE-2021-29047	Liferay DXP: security vulnerability also in 1 other product	7.5	16.05.2021
Critical	CVE-2024-25145	Liferay Portal: Cross-site Scripting also in 3 other products	9.6	07.02.2024
Critical	CVE-2024-26269	Liferay Portal: Cross-site Scripting also in 3 other products	9.6	21.02.2024
Critical	CVE-2024-25147	Liferay Portal: Cross-site Scripting also in 3 other products	9.6	21.02.2024
Critical	CVE-2023-44311	Liferay DXP: Cross-site Scripting also in 3 other products	9.6	17.10.2023
Critical	CVE-2023-42497	Liferay DXP: Cross-site Scripting also in 3 other products	9.6	17.10.2023
Critical	CVE-2023-40191	Liferay Portal: Cross-site Scripting also in 3 other products	9.0	21.02.2024
Critical	CVE-2023-47795	Liferay Portal: Cross-site Scripting also in 3 other products	9.0	21.02.2024
Critical	CVE-2024-25602	Liferay Portal: Cross-site Scripting also in 3 other products	9.0	21.02.2024
High	CVE-2025-3602	Liferay Portal: Uncontrolled Resource Consumption also in 3 other products	7.5	16.06.2025

All vulnerabilities in search

All products by Liferay

Key figures

Vulnerabilities