F5 doesn't signatures for cve

i see that liferay uses tomcat and MariaDB, MySQL, Oracle or PostgreSQL database.
https://learn.liferay.com/web/guest/w/dxp/self-hosted-installation-and-upgrades/installing-liferay/configuring-a-database

and the cves are about xss, xsrf and sql injection attacks.
the signatures for that kinds of attack are usually already inlcuded in ASM policies by selecting Server Technologies items.

ensure that you have installed latest asm signatures
and the Server Technologies settings match the components used by your liferay servers.