Browse CVEs

MEDIUM 6.1 CVE-2025-43795 Open redirect vulnerability in the System Settings in Liferay Portal 7.1.0 through 7.4.3.101, and Liferay DXP 2023.Q3.1 through 2023.Q3.4 , 7.4 GA th… Digital Experience Platform 7.3 / 7.4.3.102+ Fix from $1,6002025-09-12 MEDIUM 5.4 CVE-2025-43787 A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q3.0, 2025.Q2.0 through 2025.Q2.12, … Digital Experience Platform 2024.q1.21+ Fix from $1,6002025-09-12 MEDIUM 5.3 CVE-2025-43789 JSON Web Services in Liferay Portal 7.4.0 through 7.4.3.119, and Liferay DXP 2024.Q1.1 through 2024.Q1.9, 7.4 GA through update 92 published to OSGi … Digital Experience Platform 7.4.3.120 / 2024.Q1.10+ Fix from $1,6002025-09-12 HIGH 8.1 CVE-2025-43790 Insecure Direct Object Reference (IDOR) vulnerability in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q2.0 through 2024.Q2.6, 2024.Q1… Digital Experience Platform 7.4.3.124 / 2024.Q1.13+ Fix from $1,9502025-09-11 MEDIUM 6.1 CVE-2025-43783 Reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.73 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.1, 2024.Q2… Digital Experience Platform 7.4.3.129 / 2024.Q1.13+ Fix from $1,6002025-09-10 MEDIUM 6.5 CVE-2025-43784 Improper Access Control vulnerability in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q2.0 through 2024.Q2.8, 2024.Q1.1 through 2024… Digital Experience Platform 7.4.3.125 / 2024.Q1.13+ Fix from $1,6002025-09-10 MEDIUM 6.1 CVE-2025-43785 Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.45 through 7.4.3.128, and Liferay DXP 2024 Q2.0 through 2024.Q2.9, 2024.Q1.1 … Digital Experience Platform 7.4.3.129 / 2024.Q1.13+ Fix from $1,6002025-09-10 MEDIUM 5.3 CVE-2025-43786 Enumeration of ERC from object entry in Liferay Portal 7.4.0 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.1, 2024.Q2.0 through 2024.Q… Digital Experience Platform 7.4.3.129 / 2024.Q1.13+ Fix from $1,6002025-09-09 MEDIUM 6.1 CVE-2025-43781 Reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.110 through 7.4.3.128, and Liferay DXP 2024.Q3.1 through 2024.Q3.8, 2024.Q… Digital Experience Platform 7.4.3.129 / 2024.Q1.13+ Fix from $1,6002025-09-09 MEDIUM 5.4 CVE-2025-43775 Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.5, 2024.Q2.0 thr… Digital Experience Platform 7.4.3.129 / 2024.Q1.13+ Fix from $1,6002025-09-09 MEDIUM 5.4 CVE-2025-43776 A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 th… Digital Experience Platform 2024.q1.20 / 2025.Q1.17+ Fix from $1,6002025-09-09 MEDIUM 5.3 CVE-2025-43777 Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024… Digital Experience Platform 2024.q1.20 / 2025.Q1.17+ Fix from $1,6002025-09-09 MEDIUM 6.1 CVE-2025-43778 A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.11, 2025.Q1.0 t… Digital Experience Platform 2024.q1.21 / 2025.Q1.17+ Fix from $1,6002025-09-09 MEDIUM 6.5 CVE-2025-43763 A server-side request forgery (SSRF) vulnerability exist in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.7,… Digital Experience Platform 7.4.3.132 / 2024.q1.21+ Fix from $1,6002025-09-09 HIGH 7.2 CVE-2025-3586 In Liferay Portal 7.4.3.27 through 7.4.3.42, and Liferay DXP 2024.Q1.1 through 2024.Q1.20, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10… Digital Experience Platform 7.4.3.43+ Fix from $1,9502025-09-01 CRITICAL 9.1 CVE-2025-43773 Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024… Digital Experience Platform 2024.Q1.19 / 2025.Q1.15+ Fix from $2,3002025-08-29 CRITICAL 9.8 CVE-2025-43766 The Liferay Portal 7.4.0 through 7.3.3.131, and Liferay DXP 2024.Q4.0, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through … Digital Experience Platform 7.4.3.132 / 2024.Q1.14+ Fix from $2,3002025-08-23 MEDIUM 6.1 CVE-2025-43765 A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0, 2024.Q3.1 through 2024.Q3.13, 2… Digital Experience Platform 7.4.3.132 / 2024.Q1.14+ Fix from $1,6002025-08-23 MEDIUM 6.5 CVE-2025-43764 Self-ReDoS (Regular expression Denial of Service) exists with Role Name search field of Kaleo Designer portlet JavaScript in Liferay Portal 7.4.0 thr… Digital Experience Platform 7.4.3.132 / 2024.Q4.2+ Fix from $1,6002025-08-23 MEDIUM 6.1 CVE-2025-43767 Open Redirect vulnerability in /c/portal/edit_info_item parameter redirect in Liferay Portal 7.4.3.86 through 7.4.3.131, and Liferay DXP 2024.Q3.1 th… Digital Experience Platform 7.4.3.132 / 2024.Q1.13+ Fix from $1,6002025-08-23 HIGH 7.7 CVE-2025-43768 Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024… Digital Experience Platform 7.4.3.132 / 2024.Q1.16+ Fix from $1,9502025-08-23 MEDIUM 6.1 CVE-2025-43769 Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q3.1 through 2024.Q3.8, 2024.Q2.0 thr… Digital Experience Platform 7.4.3.132 / 2024.Q1.13+ Fix from $1,6002025-08-23 MEDIUM 6.1 CVE-2025-43770 A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.3, 2024… Digital Experience Platform 7.4.3.132 / 2024.Q1.13+ Fix from $1,6002025-08-23 MEDIUM 6.1 CVE-2025-43761 A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.4, 2024… Digital Experience Platform 7.4.3.132 / 2024.Q1.13+ Fix from $1,6002025-08-22 MEDIUM 6.5 CVE-2025-43762 Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.1, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.… Digital Experience Platform 2024.Q1.15 / 2025.Q1.2+ Fix from $1,6002025-08-22 MEDIUM 5.3 CVE-2025-43758 Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.… Digital Experience Platform 2024.Q1.16 / 2025.Q1.6+ Fix from $1,6002025-08-22 MEDIUM 5.4 CVE-2025-43760 A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4, 2024… Digital Experience Platform 2024.Q4.7 / 2025.Q1.5+ Fix from $1,6002025-08-22 MEDIUM 5.3 CVE-2025-43751 User enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, … Digital Experience Platform 2024.Q1.15+ Fix from $1,6002025-08-22 MEDIUM 6.5 CVE-2025-43752 Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.… Digital Experience Platform 2024.Q1.16 / 2025.Q1.5+ Fix from $1,6002025-08-22 MEDIUM 5.4 CVE-2025-43753 A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.3.32 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.7, 2… Digital Experience Platform 2024.Q1.17 / 2025.Q1.8+ Fix from $1,6002025-08-21