Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

com.liferay:com.liferay.login.web

3 known vulnerabilities (2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 2 medium
Registry
Maven Central

Advisories 3

  • CVE-2025-43751Medium 6.9

    User enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through…

    Affected: fixed in 6.0.66.

  • CVE-2021-29038Medium 6.3

    Liferay Portal 7.2.0 through 7.3.5, and older unsupported versions, and Liferay DXP 7.3 before fix pack 1, 7.2 before fix pack 17, and…

    Affected: fixed in 5.0.18.

  • XSS exists in Liferay Portal before 7.0 CE GA4 via a login name, password, or e-mail address.

    Affected: fixed in 1.1.20.