Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

com.liferay:com.liferay.portal.search.web

5 known vulnerabilities (4 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 4 medium
Registry
Maven Central

Advisories 5

  • CVE-2025-43781Medium 5.3

    Reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.110 through 7.4.3.128, and Liferay DXP 2024.Q3.1 through…

    Affected: from 6.0.125, fixed in 6.0.143.

  • CVE-2022-42118Medium 6.1

    A Cross-site scripting (XSS) vulnerability in the Portal Search module in Liferay Portal 7.1.0 through 7.4.2, and Liferay DXP 7.1 before…

    Affected: fixed in 6.0.12.

  • CVE-2022-42112Medium 5.4

    A Cross-site scripting (XSS) vulnerability in the Portal Search module's Sort widget in Liferay Portal 7.2.0 through 7.4.3.24, and Liferay…

    Affected: fixed in 6.0.45.

  • CVE-2022-28979Medium 6.1

    Liferay Portal v7.1.0 through v7.4.2 and Liferay DXP 7.1 before fix pack 26, 7.2 before fix pack 15, and 7.3 before service pack 3 was…

    Affected: fixed in 6.0.19.

  • Cross-site scripting (XSS) vulnerability in users.jsp in the Profile Search functionality in Liferay before 7.0.0 CE RC1 allows remote…

    Affected: fixed in 1.0.3.