Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

com.liferay:com.liferay.portal.vulcan.impl

4 known vulnerabilities (2 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 2 high, 2 medium
Registry
Maven Central

Advisories 4

  • CVE-2025-43816Medium 6.9

    A memory leak in the headless API for StructuredContents in Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and…

    Affected: fixed in 5.0.115.

  • Liferay Portal 7.4.0 through 7.4.3.101, and Liferay DXP 2023.Q3.0 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA though update 35…

    Affected: from 5.0.7, fixed in 5.0.105.

  • CVE-2025-43786Medium 6.9

    Enumeration of ERC from object entry in Liferay Portal 7.4.0 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.1, 2024.Q2.0…

    Affected: from 5.0.7, fixed in 5.0.127.

  • Liferay Portal 7.4.0 through 7.4.3.97, and Liferay DXP 2023.Q3.1 through 2023.Q3.2, 7.4 GA through update 92, 7.3 GA through update 35…

    Affected: fixed in 5.0.103.