Vulnerability index

Browse CVEs

278 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Digital Experience Platform MEDIUM 5.3
CVE-2025-62275

Blogs in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023…

Fix: 7.4.3.112+
Fix from $1,600 2025-11-01
Digital Experience Platform MEDIUM 5.5
CVE-2025-62276

The Document Library and the Adaptive Media modules in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q…

Fix: 7.4.3.112+
Fix from $1,600 2025-11-01
Digital Experience Platform MEDIUM 6.1
CVE-2025-62267

Multiple cross-site scripting (XSS) vulnerabilities in web content template’s select structure page in Liferay Portal 7.4.3.35 through 7.4.3.111, and…

Fix: 7.4.3.112+
Fix from $1,600 2025-10-31
Digital Experience Platform MEDIUM 6.1
CVE-2025-62264

Reflected cross-site scripting (XSS) vulnerability in Languauge Override in Liferay Portal 7.4.3.8 through 7.4.3.111, and Liferay DXP 2023.Q4.0 throu…

Fix: 7.4.3.112+
Fix from $1,600 2025-10-31
Digital Experience Platform MEDIUM 5.4
CVE-2025-62265

Cross-site scripting (XSS) vulnerability in the Blogs widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay D…

Fix: 7.4.3.112+
Fix from $1,600 2025-10-30
Digital Experience Platform MEDIUM 6.1
CVE-2025-62266

By default, Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5, 2023.Q4.0 through 20…

Fix: 7.4.3.110+
Fix from $1,600 2025-10-30
Digital Experience Platform MEDIUM 5.3
CVE-2025-62257

Password enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.…

Fix: 7.4.3.120+
Fix from $1,600 2025-10-30
Digital Experience Platform MEDIUM 6.5
CVE-2025-62258

CSRF vulnerability in Headless API in Liferay Portal 7.4.0 through 7.4.3.107, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, …

Fix: 7.4.3.108+
Fix from $1,600 2025-10-27
Digital Experience Platform MEDIUM 5.4
CVE-2025-62259

Liferay Portal 7.4.0 through 7.4.3.109, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA…

Fix: 7.4.3.110+
Fix from $1,600 2025-10-27
Digital Experience Platform HIGH 7.5
CVE-2025-62260

Liferay Portal 7.4.0 through 7.4.3.99, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older uns…

Fix: 7.4.3.99+
Fix from $1,950 2025-10-27
Digital Experience Platform MEDIUM 6.5
CVE-2025-62261

Liferay Portal 7.4.0 through 7.4.3.99, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA …

Fix: 7.4.3.100+
Fix from $1,600 2025-10-27
Digital Experience Platform MEDIUM 5.4
CVE-2025-62263

Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.3.7 through 7.4.3.103, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA th…

Fix: 7.4.3.104+
Fix from $1,600 2025-10-27
Digital Experience Platform MEDIUM 6.1
CVE-2025-62253

Open redirect vulnerability in page administration in Liferay Portal 7.4.0 through 7.4.3.97, and older unsupported versions, and Liferay DXP 2023.Q4.…

Fix: 7.3 / 7.4.3.98+
Fix from $1,600 2025-10-27
Digital Experience Platform HIGH 7.5
CVE-2025-62254

The ComboServlet in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.2, 2023.Q3.1 th…

Fix: after 7.4.3.111
Fix from $1,950 2025-10-23
Digital Experience Platform MEDIUM 6.1
CVE-2025-62255

Self Cross-site scripting (XSS) vulnerability on the edit Knowledge Base article page in Liferay Portal 7.4.0 through 7.4.3.101, and older unsupporte…

Fix: 7.3 / 7.4.3.102+
Fix from $1,600 2025-10-23
Digital Experience Platform MEDIUM 5.3
CVE-2025-62256

Liferay Portal 7.4.0 through 7.4.3.109, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.7, 7.4 GA through update 92, 7.3 GA th…

Fix: 7.4.3.110+
Fix from $1,600 2025-10-23
Digital Experience Platform MEDIUM 6.5
CVE-2025-62247

Missing Authorization in Collection Provider component in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 20…

Fix: 2024.q1.20+
Fix from $1,600 2025-10-22
Digital Experience Platform MEDIUM 6.1
CVE-2025-62249

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q3.0 through 2025.Q3.2, 2025…

Fix: 7.4.3.132 / 2024.q1.21+
Fix from $1,600 2025-10-21
Digital Experience Platform MEDIUM 6.5
CVE-2025-62250

Improper Authentication in Liferay Portal 7.4.0 through 7.4.3.132, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.…

Fix: 7.3 / 7.4.3.132+
Fix from $1,600 2025-10-21
Digital Experience Platform MEDIUM 6.5
CVE-2025-62251

Liferay Portal 7.3.0 through 7.4.3.119, and Liferay DXP 2023.Q3.1 through 2023.Q3.8, 2023.Q4.0 through 2023.Q4.5, 7.4 GA through update 92 and 7.3 GA…

Fix: 7.4.3.119 / 2023.q3.9+
Fix from $1,600 2025-10-13
Digital Experience Platform MEDIUM 5.4
CVE-2025-62246

Multiple stored cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP…

Fix: 7.4.3.112 / 2023.q3.9+
Fix from $1,600 2025-10-13
Digital Experience Platform MEDIUM 5.4
CVE-2025-62243

Insecure direct object reference (IDOR) vulnerability in Publications in Liferay Portal 7.4.1 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 20…

Fix: 7.4.3.113 / 2023.q3.9+
Fix from $1,600 2025-10-13
Digital Experience Platform MEDIUM 5.4
CVE-2025-62239

Cross-site scripting (XSS) vulnerability in workflow process builder in Liferay Portal 7.4.3.21 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through …

Fix: 7.4.3.112 / 2023.q3.9+
Fix from $1,600 2025-10-10
Digital Experience Platform MEDIUM 5.4
CVE-2025-62237

Stored cross-site scripting (XSS) vulnerability in Commerce’s view order page in Liferay Portal 7.4.3.8 through 7.4.3.111, and Liferay DXP 2023.Q4.0 …

Fix: 7.4.3.112 / 2023.q3.9+
Fix from $1,600 2025-10-10
Digital Experience Platform MEDIUM 5.4
CVE-2025-62238

Stored cross-site scripting (XSS) vulnerability on the Membership page in Account Settings in Liferay Portal 7.4.3.21 through 7.4.3.111, and Liferay …

Fix: 7.4.3.112 / 2023.q3.9+
Fix from $1,600 2025-10-10
Digital Experience Platform MEDIUM 5.4
CVE-2025-62240

Multiple cross-site scripting (XSS) vulnerabilities with Calendar events in Liferay Portal 7.4.3.35 through 7.4.3.111, and Liferay DXP 2023.Q4.0 thro…

Fix: 7.4.3.112 / 2023.Q3.8+
Fix from $1,600 2025-10-09
Digital Experience Platform MEDIUM 5.4
CVE-2025-43771

Multiple cross-site scripting (XSS) vulnerabilities in the Notifications widget in Liferay Portal 7.4.3.102 through 7.4.3.111, and Liferay DXP 2023.Q…

Fix: 7.4.3.112 / 2023.Q3.4+
Fix from $1,600 2025-10-08
Digital Experience Platform MEDIUM 6.1
CVE-2025-43830

Stored cross-site scripting (XSS) vulnerability in Forms in Liferay Portal 7.3.2 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023…

Fix: 7.4.3.112 / 2023.q3.9+
Fix from $1,600 2025-10-08
Digital Experience Platform MEDIUM 5.4
CVE-2025-43829

Stored cross-site scripting (XSS) vulnerability in diagram type products in Commerce in Liferay Portal 7.4.3.18 through 7.4.3.111, and Liferay DXP 20…

Fix: 7.4.3.112 / 2023.q3.9+
Fix from $1,600 2025-10-08
Digital Experience Platform MEDIUM 5.4
CVE-2025-43821

Cross-site scripting (XSS) vulnerability in the Commerce Product Comparison Table widget in Liferay Portal 7.4.0 through 7.4.3.111, and Liferay DXP 2…

Fix: 7.4.3.112 / 2023.q3.9+
Fix from $1,600 2025-10-08