com.liferay:com.liferay.server.admin.web vulnerabilities (Maven)

2 vulnerabilities.

• com.liferay:com.liferay.server.admin.web Maven Liferay Portal path traversal vulnerability with the downloading and installation of Xuggler CVE-2025-3594 Fix available 8.6 HighJune 16, 2025
• com.liferay:com.liferay.server.admin.web Maven Liferay Portal and Liferay DXP cross-site scripting (XSS) vulnerability via the script console CVE-2021-38263 Fix available 6.1 MediumMarch 2, 2022