Vulnerability index

Browse CVEs

278 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Digital Experience Platform MEDIUM 6.1
CVE-2025-43795

Open redirect vulnerability in the System Settings in Liferay Portal 7.1.0 through 7.4.3.101, and Liferay DXP 2023.Q3.1 through 2023.Q3.4 , 7.4 GA th…

Fix: 7.3 / 7.4.3.102+
Fix from $1,600 2025-09-12
Digital Experience Platform MEDIUM 5.4
CVE-2025-43787

A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q3.0, 2025.Q2.0 through 2025.Q2.12, …

Fix: 2024.q1.21+
Fix from $1,600 2025-09-12
Digital Experience Platform MEDIUM 5.3
CVE-2025-43789

JSON Web Services in Liferay Portal 7.4.0 through 7.4.3.119, and Liferay DXP 2024.Q1.1 through 2024.Q1.9, 7.4 GA through update 92 published to OSGi …

Fix: 7.4.3.120 / 2024.Q1.10+
Fix from $1,600 2025-09-12
Digital Experience Platform HIGH 8.1
CVE-2025-43790

Insecure Direct Object Reference (IDOR) vulnerability in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q2.0 through 2024.Q2.6, 2024.Q1…

Fix: 7.4.3.124 / 2024.Q1.13+
Fix from $1,950 2025-09-11
Digital Experience Platform MEDIUM 6.1
CVE-2025-43783

Reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.73 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.1, 2024.Q2…

Fix: 7.4.3.129 / 2024.Q1.13+
Fix from $1,600 2025-09-10
Digital Experience Platform MEDIUM 6.5
CVE-2025-43784

Improper Access Control vulnerability in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q2.0 through 2024.Q2.8, 2024.Q1.1 through 2024…

Fix: 7.4.3.125 / 2024.Q1.13+
Fix from $1,600 2025-09-10
Digital Experience Platform MEDIUM 6.1
CVE-2025-43785

Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.45 through 7.4.3.128, and Liferay DXP 2024 Q2.0 through 2024.Q2.9, 2024.Q1.1 …

Fix: 7.4.3.129 / 2024.Q1.13+
Fix from $1,600 2025-09-10
Digital Experience Platform MEDIUM 5.3
CVE-2025-43786

Enumeration of ERC from object entry in Liferay Portal 7.4.0 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.1, 2024.Q2.0 through 2024.Q…

Fix: 7.4.3.129 / 2024.Q1.13+
Fix from $1,600 2025-09-09
Digital Experience Platform MEDIUM 6.1
CVE-2025-43781

Reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.110 through 7.4.3.128, and Liferay DXP 2024.Q3.1 through 2024.Q3.8, 2024.Q…

Fix: 7.4.3.129 / 2024.Q1.13+
Fix from $1,600 2025-09-09
Digital Experience Platform MEDIUM 5.4
CVE-2025-43775

Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.5, 2024.Q2.0 thr…

Fix: 7.4.3.129 / 2024.Q1.13+
Fix from $1,600 2025-09-09
Digital Experience Platform MEDIUM 5.4
CVE-2025-43776

A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 th…

Fix: 2024.q1.20 / 2025.Q1.17+
Fix from $1,600 2025-09-09
Digital Experience Platform MEDIUM 5.3
CVE-2025-43777

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024…

Fix: 2024.q1.20 / 2025.Q1.17+
Fix from $1,600 2025-09-09
Digital Experience Platform MEDIUM 6.1
CVE-2025-43778

A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.11, 2025.Q1.0 t…

Fix: 2024.q1.21 / 2025.Q1.17+
Fix from $1,600 2025-09-09
Digital Experience Platform MEDIUM 6.5
CVE-2025-43763

A server-side request forgery (SSRF) vulnerability exist in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.7,…

Fix: 7.4.3.132 / 2024.q1.21+
Fix from $1,600 2025-09-09
Digital Experience Platform HIGH 7.2
CVE-2025-3586

In Liferay Portal 7.4.3.27 through 7.4.3.42, and Liferay DXP 2024.Q1.1 through 2024.Q1.20, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10…

Fix: 7.4.3.43+
Fix from $1,950 2025-09-01
Digital Experience Platform CRITICAL 9.1
CVE-2025-43773

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024…

Fix: 2024.Q1.19 / 2025.Q1.15+
Fix from $2,300 2025-08-29
Digital Experience Platform CRITICAL 9.8
CVE-2025-43766

The Liferay Portal 7.4.0 through 7.3.3.131, and Liferay DXP 2024.Q4.0, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through …

Fix: 7.4.3.132 / 2024.Q1.14+
Fix from $2,300 2025-08-23
Digital Experience Platform MEDIUM 6.1
CVE-2025-43765

A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0, 2024.Q3.1 through 2024.Q3.13, 2…

Fix: 7.4.3.132 / 2024.Q1.14+
Fix from $1,600 2025-08-23
Digital Experience Platform MEDIUM 6.5
CVE-2025-43764

Self-ReDoS (Regular expression Denial of Service) exists with Role Name search field of Kaleo Designer portlet JavaScript in Liferay Portal 7.4.0 thr…

Fix: 7.4.3.132 / 2024.Q4.2+
Fix from $1,600 2025-08-23
Digital Experience Platform MEDIUM 6.1
CVE-2025-43767

Open Redirect vulnerability in /c/portal/edit_info_item parameter redirect in Liferay Portal 7.4.3.86 through 7.4.3.131, and Liferay DXP 2024.Q3.1 th…

Fix: 7.4.3.132 / 2024.Q1.13+
Fix from $1,600 2025-08-23
Digital Experience Platform HIGH 7.7
CVE-2025-43768

Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024…

Fix: 7.4.3.132 / 2024.Q1.16+
Fix from $1,950 2025-08-23
Digital Experience Platform MEDIUM 6.1
CVE-2025-43769

Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q3.1 through 2024.Q3.8, 2024.Q2.0 thr…

Fix: 7.4.3.132 / 2024.Q1.13+
Fix from $1,600 2025-08-23
Digital Experience Platform MEDIUM 6.1
CVE-2025-43770

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.3, 2024…

Fix: 7.4.3.132 / 2024.Q1.13+
Fix from $1,600 2025-08-23
Digital Experience Platform MEDIUM 6.1
CVE-2025-43761

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.4, 2024…

Fix: 7.4.3.132 / 2024.Q1.13+
Fix from $1,600 2025-08-22
Digital Experience Platform MEDIUM 6.5
CVE-2025-43762

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.1, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.…

Fix: 2024.Q1.15 / 2025.Q1.2+
Fix from $1,600 2025-08-22
Digital Experience Platform MEDIUM 5.3
CVE-2025-43758

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.…

Fix: 2024.Q1.16 / 2025.Q1.6+
Fix from $1,600 2025-08-22
Digital Experience Platform MEDIUM 5.4
CVE-2025-43760

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4, 2024…

Fix: 2024.Q4.7 / 2025.Q1.5+
Fix from $1,600 2025-08-22
Digital Experience Platform MEDIUM 5.3
CVE-2025-43751

User enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, …

Fix: 2024.Q1.15+
Fix from $1,600 2025-08-22
Digital Experience Platform MEDIUM 6.5
CVE-2025-43752

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.…

Fix: 2024.Q1.16 / 2025.Q1.5+
Fix from $1,600 2025-08-22
Digital Experience Platform MEDIUM 5.4
CVE-2025-43753

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.3.32 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.7, 2…

Fix: 2024.Q1.17 / 2025.Q1.8+
Fix from $1,600 2025-08-21