Vulnerability index

Browse CVEs

278 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Digital Experience Platform MEDIUM 6.5
CVE-2025-43747

A server-side request forgery (SSRF) vulnerability exists in the Liferay DXP 2025.Q2.0 through 2025.Q2.3 due to insecure domain validation on analyti…

Fix: 2025.Q2.4+
Fix from $1,600 2025-08-21
Digital Experience Platform MEDIUM 5.3
CVE-2025-43754

Username enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.…

Fix: 2024.Q1.15+
Fix from $1,600 2025-08-21
Digital Experience Platform MEDIUM 5.4
CVE-2025-43755

A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 t through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.13,…

Fix: 2024.Q1.18 / 2025.Q1.14+
Fix from $1,600 2025-08-21
Digital Experience Platform MEDIUM 5.4
CVE-2025-43756

<!--td {border: 1px solid #cccccc;}br {mso-data-placement:same-cell;}-->A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.…

Fix: 2024.q1.20 / 2025.Q1.16+
Fix from $1,600 2025-08-21
Digital Experience Platform MEDIUM 5.4
CVE-2025-43757

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.2, 2025…

Fix: 2024.Q1.19 / 2025.Q1.15+
Fix from $1,600 2025-08-20
Digital Experience Platform MEDIUM 5.4
CVE-2025-43746

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.2, 2025…

Fix: 2024.Q1.19 / 2025.Q1.15+
Fix from $1,600 2025-08-20
Digital Experience Platform MEDIUM 6.8
CVE-2025-43748

Insufficient CSRF protection for omni-administrator users in Liferay Portal 7.0.0 through 7.4.3.119, and Liferay DXP 2024.Q1.1 through 2024.Q1.6, 202…

Fix: 7.4.3.120 / 2024.Q1.7+
Fix from $1,600 2025-08-20
Digital Experience Platform MEDIUM 6.5
CVE-2025-43750

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.1, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.…

Fix: 2024.Q1.15 / 2025.Q1.2+
Fix from $1,600 2025-08-20
Digital Experience Platform MEDIUM 5.3
CVE-2025-43749

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.1, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.…

Fix: 2024.Q1.15 / 2025.Q1.2+
Fix from $1,600 2025-08-20
Digital Experience Platform MEDIUM 6.1
CVE-2025-43742

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.3, 2024…

Fix: 2024.Q1.15 / 2025.Q1.4+
Fix from $1,600 2025-08-20
Digital Experience Platform MEDIUM 5.4
CVE-2025-43741

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.3, 2024…

Fix: 2024.Q1.15 / 2025.Q1.4+
Fix from $1,600 2025-08-20
Digital Experience Platform MEDIUM 5.4
CVE-2025-43744

A stored DOM-based Cross-Site Scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.5, 2…

Fix: 2024.q1.21 / 2025.Q1.16+
Fix from $1,600 2025-08-19
Digital Experience Platform MEDIUM 6.5
CVE-2025-43745

A CSRF vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.7, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 …

Fix: 2024.q1.20 / 2025.Q1.16+
Fix from $1,600 2025-08-19
Digital Experience Platform MEDIUM 5.4
CVE-2025-43737

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8 and 2025.Q1.0 throu…

Fix: 2025.Q1.16 / 2025.Q2.9+
Fix from $1,600 2025-08-19
Digital Experience Platform MEDIUM 5.4
CVE-2025-43738

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8, 2025…

Fix: 2024.q1.20 / 2025.Q1.16+
Fix from $1,600 2025-08-19
Digital Experience Platform MEDIUM 5.4
CVE-2025-43740

A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.3.120 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8, 2025.Q1.0…

Fix: 2024.Q1.20 / 2025.Q1.16+
Fix from $1,600 2025-08-19
Digital Experience Platform MEDIUM 5.4
CVE-2025-43731

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.8, 2024…

Fix: 2024.Q1.17 / 2025.Q1.9+
Fix from $1,600 2025-08-18
Digital Experience Platform MEDIUM 5.4
CVE-2025-43733

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.7 allows a remote aut…

Fix: 2025.Q1.8+
Fix from $1,600 2025-08-18
Digital Experience Platform MEDIUM 5.4
CVE-2025-43734

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.10, 202…

Fix: after 2025.q1.10
Fix from $1,600 2025-08-12
Digital Experience Platform MEDIUM 6.1
CVE-2025-43735

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024…

Fix: after 2024.q4.7
Fix from $1,600 2025-08-12
Digital Experience Platform HIGH 8.6
CVE-2025-4581

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4 ,2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.…

Fix: after 2025.q1.4
Fix from $1,950 2025-08-09
Digital Experience Platform MEDIUM 5.0
CVE-2025-4655

SSRF vulnerability in FreeMarker templates in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through …

Fix: 2024.Q1.16 / 2025.Q1.6+
Fix from $1,600 2025-08-09
Digital Experience Platform MEDIUM 6.1
CVE-2025-4576

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.133, and Liferay DXP 2025.Q1.0 through 2025.Q1.4 ,2024…

Fix: after 2025.q1.4
Fix from $1,600 2025-08-08
Digital Experience Platform MEDIUM 6.1
CVE-2025-4604

The vulnerable code can bypass the Captcha check in Liferay Portal 7.4.3.80 through 7.4.3.132, and Liferay DXP 2024.Q1.1 through 2024.Q1.19, 2024.Q2.…

Fix: after 2025.q1.15
Fix from $1,600 2025-08-04
Digital Experience Platform MEDIUM 6.1
CVE-2025-4599

The fragment preview functionality in Liferay Portal 7.4.3.61 through 7.4.3.132, and Liferay DXP 2024.Q4.1 through 2024.Q4.5, 2024.Q3.1 through 2024.…

Fix: 7.4.3.132+
Fix from $1,600 2025-08-04
Digital Experience Platform CRITICAL 9.8
CVE-2025-3594

Path traversal vulnerability with the downloading and installation of Xuggler in Liferay Portal 7.0.0 through 7.4.3.4, and Liferay DXP 7.4 GA, 7.3 GA…

Fix: after 7.4.3.4
Fix from $2,300 2025-06-16
Digital Experience Platform HIGH 7.5
CVE-2025-3526

SessionClicks in Liferay Portal 7.0.0 through 7.4.3.21, and Liferay DXP 7.4 GA through update 9, 7.3 GA through update 25, and older unsupported vers…

Fix: after 7.4.3.21
Fix from $1,950 2025-06-16
Digital Experience Platform HIGH 7.5
CVE-2025-3602

Liferay Portal 7.4.0 through 7.4.3.97, and Liferay DXP 2023.Q3.1 through 2023.Q3.2, 7.4 GA through update 92, 7.3 GA through update 35, and 7.2 fix p…

Fix: after 2023.q3.2
Fix from $1,950 2025-06-16
Digital Experience Platform MEDIUM 6.1
CVE-2025-4388

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.5, 2024…

Fix: 7.4.3.132 / 2024.Q1.13+
Fix from $1,600 2025-05-06
Digital Experience Platform MEDIUM 5.4
CVE-2025-3760

A stored cross-site scripting (XSS) vulnerability exists with radio button type custom fields in Liferay Portal 7.2.0 through 7.4.3.129, and Liferay …

Fix: 2024.Q1.13 / 2024.q3.10+
Fix from $1,600 2025-04-17