com.liferay.portal:com.liferay.portal.impl (2.18.0), com.liferay:com.liferay.asset.browser.web (>=1.0.13, <=1.0.24) +4 more potentially affected by CVE-2025-43793 via com.liferay.portal:com.liferay.portal.kernel (2.18.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 2.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 2.18.0 -...

com.liferay.portal:com.liferay.portal.impl (2.18.0), com.liferay:com.liferay.asset.browser.web (>=1.0.13, <=1.0.24) +4 more potentially affected by CVE-2025-43770 via com.liferay.portal:com.liferay.portal.kernel (2.18.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 2.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 2.18.0 -...

com.liferay.portal:com.liferay.portal.impl (2.18.0), com.liferay:com.liferay.asset.browser.web (>=1.0.13, <=1.0.24) +4 more potentially affected by CVE-2025-3526 via com.liferay.portal:com.liferay.portal.kernel (2.18.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 2.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: - com.liferay.portal:com.liferay.portal.impl 2.18.0 -...

Cross-site Scripting(XSS)

com.liferay.knowledge.base.service is vulnerable to cross-site scripting XSS. The vulnerability exists because it does not properly sanitize the user-provided parameters such as userId, allowing a remote attacker to inject arbitrary Javascript into the victim's browser...