Liferay Digital Experience Platform vulnerabilities
264 published vulnerabilities in Liferay Digital Experience Platform. The most were published in 2025 (142), and 142 so far in 2025.
Liferay Digital Experience Platform vulnerabilities by year
2020
2021
2022
2023
2024
2025
Most exploited Liferay Digital Experience Platform vulnerabilities
- CVE-2024-8980 Liferay Portal and Liferay DXP Vulnerable to CSRF in the Script Console
- CVE-2023-42496 Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting
- CVE-2023-42498 Liferay Portal Language Override edit screen and Liferay DXP vulnerable to reflected Cross-site Scripting
- CVE-2024-25147 Liferay Portal and Liferay DXP vulnerable to Cross-site Scripting
- CVE-2024-26269 Liferay Portal Frontend JS module's portlet.js and Liferay DXP vulnerable to Cross-site Scripting
- CVE-2024-25145 Liferay Portal stored cross-site scripting (XSS) vulnerability
- CVE-2023-42497 Liferay Portal and Liferay DXP Vulnerable to Reflected XSS via the Export for Translation Page
- CVE-2023-42627 Liferay Portal and Liferay DXP Vulnerable to XSS in the Commerce Module
- CVE-2023-44311 Liferay Portal and Liferay DXP Vulnerable to XSS via the OAuth2ProviderApplicationRedirect Class
- CVE-2024-38002 Liferay Portal and Liferay DXP Workflow Component Does Not Check User Permissions
- CVE-2023-40191 Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting
- CVE-2023-47795 Liferay Portal Document and Media widget and Liferay DXP vulnerable to stored Cross-site Scripting
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.