Browse CVEs

MEDIUM 5.3 CVE-2025-62275 Blogs in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023… Digital Experience Platform 7.4.3.112+ Fix from $1,6002025-11-01 MEDIUM 5.5 CVE-2025-62276 The Document Library and the Adaptive Media modules in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q… Digital Experience Platform 7.4.3.112+ Fix from $1,6002025-11-01 MEDIUM 6.1 CVE-2025-62267 Multiple cross-site scripting (XSS) vulnerabilities in web content template’s select structure page in Liferay Portal 7.4.3.35 through 7.4.3.111, and… Digital Experience Platform 7.4.3.112+ Fix from $1,6002025-10-31 MEDIUM 6.1 CVE-2025-62264 Reflected cross-site scripting (XSS) vulnerability in Languauge Override in Liferay Portal 7.4.3.8 through 7.4.3.111, and Liferay DXP 2023.Q4.0 throu… Digital Experience Platform 7.4.3.112+ Fix from $1,6002025-10-31 MEDIUM 5.4 CVE-2025-62265 Cross-site scripting (XSS) vulnerability in the Blogs widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay D… Digital Experience Platform 7.4.3.112+ Fix from $1,6002025-10-30 MEDIUM 6.1 CVE-2025-62266 By default, Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5, 2023.Q4.0 through 20… Digital Experience Platform 7.4.3.110+ Fix from $1,6002025-10-30 MEDIUM 5.3 CVE-2025-62257 Password enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.… Digital Experience Platform 7.4.3.120+ Fix from $1,6002025-10-30 MEDIUM 6.5 CVE-2025-62258 CSRF vulnerability in Headless API in Liferay Portal 7.4.0 through 7.4.3.107, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, … Digital Experience Platform 7.4.3.108+ Fix from $1,6002025-10-27 MEDIUM 5.4 CVE-2025-62259 Liferay Portal 7.4.0 through 7.4.3.109, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA… Digital Experience Platform 7.4.3.110+ Fix from $1,6002025-10-27 HIGH 7.5 CVE-2025-62260 Liferay Portal 7.4.0 through 7.4.3.99, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older uns… Digital Experience Platform 7.4.3.99+ Fix from $1,9502025-10-27 MEDIUM 6.5 CVE-2025-62261 Liferay Portal 7.4.0 through 7.4.3.99, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA … Digital Experience Platform 7.4.3.100+ Fix from $1,6002025-10-27 MEDIUM 5.4 CVE-2025-62263 Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.3.7 through 7.4.3.103, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA th… Digital Experience Platform 7.4.3.104+ Fix from $1,6002025-10-27 MEDIUM 6.1 CVE-2025-62253 Open redirect vulnerability in page administration in Liferay Portal 7.4.0 through 7.4.3.97, and older unsupported versions, and Liferay DXP 2023.Q4.… Digital Experience Platform 7.3 / 7.4.3.98+ Fix from $1,6002025-10-27 HIGH 7.5 CVE-2025-62254 The ComboServlet in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.2, 2023.Q3.1 th… Digital Experience Platform after 7.4.3.111 Fix from $1,9502025-10-23 MEDIUM 6.1 CVE-2025-62255 Self Cross-site scripting (XSS) vulnerability on the edit Knowledge Base article page in Liferay Portal 7.4.0 through 7.4.3.101, and older unsupporte… Digital Experience Platform 7.3 / 7.4.3.102+ Fix from $1,6002025-10-23 MEDIUM 5.3 CVE-2025-62256 Liferay Portal 7.4.0 through 7.4.3.109, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.7, 7.4 GA through update 92, 7.3 GA th… Digital Experience Platform 7.4.3.110+ Fix from $1,6002025-10-23 MEDIUM 6.5 CVE-2025-62247 Missing Authorization in Collection Provider component in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 20… Digital Experience Platform 2024.q1.20+ Fix from $1,6002025-10-22 MEDIUM 6.1 CVE-2025-62249 A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q3.0 through 2025.Q3.2, 2025… Digital Experience Platform 7.4.3.132 / 2024.q1.21+ Fix from $1,6002025-10-21 MEDIUM 6.5 CVE-2025-62250 Improper Authentication in Liferay Portal 7.4.0 through 7.4.3.132, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.… Digital Experience Platform 7.3 / 7.4.3.132+ Fix from $1,6002025-10-21 MEDIUM 6.5 CVE-2025-62251 Liferay Portal 7.3.0 through 7.4.3.119, and Liferay DXP 2023.Q3.1 through 2023.Q3.8, 2023.Q4.0 through 2023.Q4.5, 7.4 GA through update 92 and 7.3 GA… Digital Experience Platform 7.4.3.119 / 2023.q3.9+ Fix from $1,6002025-10-13 MEDIUM 5.4 CVE-2025-62246 Multiple stored cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP… Digital Experience Platform 7.4.3.112 / 2023.q3.9+ Fix from $1,6002025-10-13 MEDIUM 5.4 CVE-2025-62243 Insecure direct object reference (IDOR) vulnerability in Publications in Liferay Portal 7.4.1 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 20… Digital Experience Platform 7.4.3.113 / 2023.q3.9+ Fix from $1,6002025-10-13 MEDIUM 5.4 CVE-2025-62239 Cross-site scripting (XSS) vulnerability in workflow process builder in Liferay Portal 7.4.3.21 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through … Digital Experience Platform 7.4.3.112 / 2023.q3.9+ Fix from $1,6002025-10-10 MEDIUM 5.4 CVE-2025-62237 Stored cross-site scripting (XSS) vulnerability in Commerce’s view order page in Liferay Portal 7.4.3.8 through 7.4.3.111, and Liferay DXP 2023.Q4.0 … Digital Experience Platform 7.4.3.112 / 2023.q3.9+ Fix from $1,6002025-10-10 MEDIUM 5.4 CVE-2025-62238 Stored cross-site scripting (XSS) vulnerability on the Membership page in Account Settings in Liferay Portal 7.4.3.21 through 7.4.3.111, and Liferay … Digital Experience Platform 7.4.3.112 / 2023.q3.9+ Fix from $1,6002025-10-10 MEDIUM 5.4 CVE-2025-62240 Multiple cross-site scripting (XSS) vulnerabilities with Calendar events in Liferay Portal 7.4.3.35 through 7.4.3.111, and Liferay DXP 2023.Q4.0 thro… Digital Experience Platform 7.4.3.112 / 2023.Q3.8+ Fix from $1,6002025-10-09 MEDIUM 5.4 CVE-2025-43771 Multiple cross-site scripting (XSS) vulnerabilities in the Notifications widget in Liferay Portal 7.4.3.102 through 7.4.3.111, and Liferay DXP 2023.Q… Digital Experience Platform 7.4.3.112 / 2023.Q3.4+ Fix from $1,6002025-10-08 MEDIUM 6.1 CVE-2025-43830 Stored cross-site scripting (XSS) vulnerability in Forms in Liferay Portal 7.3.2 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023… Digital Experience Platform 7.4.3.112 / 2023.q3.9+ Fix from $1,6002025-10-08 MEDIUM 5.4 CVE-2025-43829 Stored cross-site scripting (XSS) vulnerability in diagram type products in Commerce in Liferay Portal 7.4.3.18 through 7.4.3.111, and Liferay DXP 20… Digital Experience Platform 7.4.3.112 / 2023.q3.9+ Fix from $1,6002025-10-08 MEDIUM 5.4 CVE-2025-43821 Cross-site scripting (XSS) vulnerability in the Commerce Product Comparison Table widget in Liferay Portal 7.4.0 through 7.4.3.111, and Liferay DXP 2… Digital Experience Platform 7.4.3.112 / 2023.q3.9+ Fix from $1,6002025-10-08