65 matches found
Improper Authentication
com.liferay, com.liferay.portal.cluster.multiple are vulnerable to Improper Authentication. The vulnerability is due to insufficient authentication of cluster messages, which allows a remote attacker to send unauthenticated malicious data that is processed as trusted data by the affected systems...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization in the Objects module. An authenticated attacker with Instance Administrator privileges can execute arbitrary code by submitting specially crafted Groovy scripts through Object Actions or Validations. Remediation...
com.liferay:com.liferay.ant.bnd (>=2.0.25, <=2.0.39), com.liferay:com.liferay.asset.publisher.web (>=1.1.0, <=1.1.5) +12 more potentially affected by CVE-2025-62276 via com.liferay.portal:com.liferay.portal.impl (2.4.0)
com.liferay.portal:com.liferay.portal.impl MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay:com.liferay.ant.bnd =2.0.25, =1.1.0, =2.0.3, =1.0.0, =3.0.0,...
com.liferay:com.liferay.portal.osgi.web.wab.generator (>=2.1.22, <=2.1.45) potentially affected by CVE-2025-62276 via com.liferay.portal:com.liferay.portal.impl (2.12.0)
com.liferay.portal:com.liferay.portal.impl MAVEN version 2.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay:com.liferay.portal.osgi.web.wab.generator =2.1.22, =2.1.45...
com.liferay:com.liferay.portal.tools.service.builder (>=1.0.157, <=1.0.166) potentially affected by CVE-2025-62276 via com.liferay.portal:com.liferay.portal.impl (2.15.0)
com.liferay.portal:com.liferay.portal.impl MAVEN version 2.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay:com.liferay.portal.tools.service.builder =1.0.157, =1.0.166...
com.liferay:com.liferay.exportimport.service (>=3.7.0, <=4.0.8) potentially affected by CVE-2025-62276 via com.liferay.portal:com.liferay.portal.impl (2.16.0)
com.liferay.portal:com.liferay.portal.impl MAVEN version 2.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay:com.liferay.exportimport.service =3.7.0, =4.0.8 Source cves:...
com.liferay:com.liferay.portal.tools.service.builder (>=1.0.167, <=1.0.188) potentially affected by CVE-2025-62276 via com.liferay.portal:com.liferay.portal.impl (2.20.0)
com.liferay.portal:com.liferay.portal.impl MAVEN version 2.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay:com.liferay.portal.tools.service.builder =1.0.167, =1.0.188...
com.liferay:com.liferay.portal.tools.service.builder (>=1.0.127, <=1.0.148) potentially affected by CVE-2025-62261 via com.liferay.portal:com.liferay.portal.impl (2.8.0)
com.liferay.portal:com.liferay.portal.impl MAVEN version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay:com.liferay.portal.tools.service.builder =1.0.127, =1.0.148...
com.liferay:com.liferay.portal.osgi.web.wab.generator (>=2.1.22, <=2.1.45) potentially affected by CVE-2025-62261 via com.liferay.portal:com.liferay.portal.impl (2.12.0)
com.liferay.portal:com.liferay.portal.impl MAVEN version 2.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay:com.liferay.portal.osgi.web.wab.generator =2.1.22, =2.1.45...
com.liferay:com.liferay.portal.tools.service.builder (>=1.0.150, <=1.0.155) potentially affected by CVE-2025-62261 via com.liferay.portal:com.liferay.portal.impl (2.13.0)
com.liferay.portal:com.liferay.portal.impl MAVEN version 2.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay:com.liferay.portal.tools.service.builder =1.0.150, =1.0.155...
com.liferay:com.liferay.portal.tools.service.builder (>=1.0.157, <=1.0.166) potentially affected by CVE-2025-62261 via com.liferay.portal:com.liferay.portal.impl (2.15.0)
com.liferay.portal:com.liferay.portal.impl MAVEN version 2.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay:com.liferay.portal.tools.service.builder =1.0.157, =1.0.166...
com.liferay:com.liferay.portal.lpkg.deployer (2.1.6) potentially affected by CVE-2025-62261 via com.liferay.portal:com.liferay.portal.impl (2.25.0)
com.liferay.portal:com.liferay.portal.impl MAVEN version 2.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay:com.liferay.portal.lpkg.deployer 2.1.6 Source cves:...
com.liferay.content-targeting:com.liferay.content.targeting.analytics.api (>=2.0.1, <=3.0.0), com.liferay.content-targeting:com.liferay.content.targeting.anonymous.users.api (>=2.0.1, <=2.0.2) +316 more potentially affected by CVE-2025-62261 via com.liferay.portal:com.liferay.portal.impl (>=1.0.0, <=62.0.1)
com.liferay.portal:com.liferay.portal.impl MAVEN version =1.0.0, =2.0.1, =2.0.1, =3.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =2.0.25, =1.0.0, =1.0.0, =2.0.13 and more Source cves: CVE-2025-62261 Source advi...
com.liferay:com.liferay.portal.tools.service.builder (>=1.0.127, <=1.0.148) potentially affected by CVE-2025-62254 via com.liferay.portal:com.liferay.portal.impl (2.8.0)
com.liferay.portal:com.liferay.portal.impl MAVEN version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay:com.liferay.portal.tools.service.builder =1.0.127, =1.0.148...
com.liferay:com.liferay.exportimport.service (>=3.7.0, <=4.0.8) potentially affected by CVE-2025-62254 via com.liferay.portal:com.liferay.portal.impl (2.16.0)
com.liferay.portal:com.liferay.portal.impl MAVEN version 2.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay:com.liferay.exportimport.service =3.7.0, =4.0.8 Source cves:...
com.liferay:com.liferay.portal.tools.service.builder (>=1.0.167, <=1.0.188) potentially affected by CVE-2025-62254 via com.liferay.portal:com.liferay.portal.impl (2.20.0)
com.liferay.portal:com.liferay.portal.impl MAVEN version 2.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay:com.liferay.portal.tools.service.builder =1.0.167, =1.0.188...
Insecure Direct Object Reference (IDOR)
com.liferay, com.liferay.object.service is vulnerable to Insecure Direct Object Reference IDOR. The vulnerability is due to insufficient access control between virtual instances, which allows an attacker to access, create, edit, or relate data and object entries/definitions across different virtu...
com.liferay:com.liferay.ant.bnd (>=2.0.20, <=2.0.50), com.liferay:com.liferay.css.builder (1.0.15) +4 more potentially affected by CVE-2025-62249 via com.liferay.portal:com.liferay.portal.impl (114.1.0)
com.liferay.portal:com.liferay.portal.impl MAVEN version 114.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay:com.liferay.ant.bnd =2.0.20, =1.0.12, =1.0.5, =1.0.102,...
com.liferay:com.liferay.portal.lpkg.deployer (2.1.6) potentially affected by CVE-2025-62249 via com.liferay.portal:com.liferay.portal.impl (2.25.0)
com.liferay.portal:com.liferay.portal.impl MAVEN version 2.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay:com.liferay.portal.lpkg.deployer 2.1.6 Source cves:...
com.liferay:com.liferay.portal.tools.service.builder (>=1.0.127, <=1.0.148) potentially affected by CVE-2025-62252 via com.liferay.portal:com.liferay.portal.impl (2.8.0)
com.liferay.portal:com.liferay.portal.impl MAVEN version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay:com.liferay.portal.tools.service.builder =1.0.127, =1.0.148...