Product by Liferay

Liferay Portal

208 known vulnerabilities in Liferay Portal (Liferay), 0 of them actively exploited (CISA KEV).

208

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Liferay Portal (Liferay)

Critical	CVE-2023-42627	Liferay DXP: Cross-site Scripting also in 3 other products	9.6	17.10.2023
Critical	CVE-2023-42628	Liferay DXP: Cross-site Scripting also in 3 other products	9.0	17.10.2023
Critical	CVE-2023-42629	Liferay DXP: Cross-site Scripting also in 3 other products	9.0	17.10.2023
Medium	CVE-2025-4388	Liferay Portal: Cross-site Scripting also in 3 other products	6.1	06.05.2025
Critical	CVE-2025-3594	Liferay Portal: Path Traversal also in 3 other products	9.8	16.06.2025
High	CVE-2025-3526	Liferay Portal: Uncontrolled Resource Consumption also in 3 other products	7.5	16.06.2025
Critical	CVE-2023-47797	Liferay Portal: Cross-site Scripting also in 1 other product	9.6	17.11.2023
Critical	CVE-2024-38002	Liferay Portal: Missing Authorization also in 3 other products	9.0	22.10.2024
Critical	CVE-2023-42498	Liferay Portal: Cross-site Scripting also in 3 other products	9.6	21.02.2024
Critical	CVE-2023-42496	Liferay Portal: Cross-site Scripting also in 3 other products	9.6	21.02.2024
Critical	CVE-2025-43766	Liferay Portal: Unrestricted Upload of File with Dangerous Type also in 3 other products	9.8	23.08.2025
Critical	CVE-2024-25145	Liferay Portal: Cross-site Scripting also in 3 other products	9.6	07.02.2024
Critical	CVE-2024-26269	Liferay Portal: Cross-site Scripting also in 3 other products	9.6	21.02.2024
Critical	CVE-2024-25147	Liferay Portal: Cross-site Scripting also in 3 other products	9.6	21.02.2024
Critical	CVE-2023-44311	Liferay DXP: Cross-site Scripting also in 3 other products	9.6	17.10.2023
Critical	CVE-2023-42497	Liferay DXP: Cross-site Scripting also in 3 other products	9.6	17.10.2023
Critical	CVE-2023-40191	Liferay Portal: Cross-site Scripting also in 3 other products	9.0	21.02.2024
Critical	CVE-2023-47795	Liferay Portal: Cross-site Scripting also in 3 other products	9.0	21.02.2024
Critical	CVE-2024-25602	Liferay Portal: Cross-site Scripting also in 3 other products	9.0	21.02.2024
High	CVE-2025-3602	Liferay Portal: Uncontrolled Resource Consumption also in 3 other products	7.5	16.06.2025
Critical	CVE-2024-26266	Liferay Portal: Cross-site Scripting also in 3 other products	9.0	21.02.2024
Critical	CVE-2024-25603	Liferay Portal: Cross-site Scripting also in 3 other products	9.0	21.02.2024
Critical	CVE-2024-25152	Liferay Portal: Cross-site Scripting also in 3 other products	9.0	21.02.2024
Critical	CVE-2024-25601	Liferay Portal: Cross-site Scripting also in 3 other products	9.0	21.02.2024
High	CVE-2025-43813	Liferay Portal: Path Traversal also in 3 other products	8.2	29.09.2025

All vulnerabilities in search

All products by Liferay

Key figures

Vulnerabilities