Top technology
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
MEDIUM 6.5
CVE-2025-43747
A server-side request forgery (SSRF) vulnerability exists in the Liferay DXP 2025.Q2.0 through 2025.Q2.3 due to insecure domain validation on analyti…
Digital Experience Platform
2025.Q2.4+
MEDIUM 5.3
CVE-2025-43754
Username enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.…
Digital Experience Platform
2024.Q1.15+
MEDIUM 5.4
CVE-2025-43755
A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 t through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.13,…
Digital Experience Platform
2024.Q1.18 / 2025.Q1.14+
MEDIUM 5.4
CVE-2025-43756
<!--td {border: 1px solid #cccccc;}br {mso-data-placement:same-cell;}-->A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.…
Digital Experience Platform
2024.q1.20 / 2025.Q1.16+
MEDIUM 5.4
CVE-2025-43757
A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.2, 2025…
Digital Experience Platform
2024.Q1.19 / 2025.Q1.15+
MEDIUM 5.4
CVE-2025-43746
A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.2, 2025…
Digital Experience Platform
2024.Q1.19 / 2025.Q1.15+
MEDIUM 6.8
CVE-2025-43748
Insufficient CSRF protection for omni-administrator users in Liferay Portal 7.0.0 through 7.4.3.119, and Liferay DXP 2024.Q1.1 through 2024.Q1.6, 202…
Digital Experience Platform
7.4.3.120 / 2024.Q1.7+
MEDIUM 6.5
CVE-2025-43750
Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.1, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.…
Digital Experience Platform
2024.Q1.15 / 2025.Q1.2+
MEDIUM 5.3
CVE-2025-43749
Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.1, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.…
Digital Experience Platform
2024.Q1.15 / 2025.Q1.2+
MEDIUM 6.1
CVE-2025-43742
A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.3, 2024…
Digital Experience Platform
2024.Q1.15 / 2025.Q1.4+
MEDIUM 5.4
CVE-2025-43741
A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.3, 2024…
Digital Experience Platform
2024.Q1.15 / 2025.Q1.4+
MEDIUM 5.4
CVE-2025-43744
A stored DOM-based Cross-Site Scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.5, 2…
Digital Experience Platform
2024.q1.21 / 2025.Q1.16+
MEDIUM 6.5
CVE-2025-43745
A CSRF vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.7, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 …
Digital Experience Platform
2024.q1.20 / 2025.Q1.16+
MEDIUM 5.4
CVE-2025-43737
A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8 and 2025.Q1.0 throu…
Digital Experience Platform
2025.Q1.16 / 2025.Q2.9+
MEDIUM 5.4
CVE-2025-43738
A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8, 2025…
Digital Experience Platform
2024.q1.20 / 2025.Q1.16+
MEDIUM 5.4
CVE-2025-43740
A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.3.120 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8, 2025.Q1.0…
Digital Experience Platform
2024.Q1.20 / 2025.Q1.16+
MEDIUM 5.4
CVE-2025-43731
A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.8, 2024…
Digital Experience Platform
2024.Q1.17 / 2025.Q1.9+
MEDIUM 5.4
CVE-2025-43733
A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.7 allows a remote aut…
Digital Experience Platform
2025.Q1.8+
MEDIUM 5.4
CVE-2025-43734
A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.10, 202…
Digital Experience Platform
after 2025.q1.10
MEDIUM 6.1
CVE-2025-43735
A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024…
Digital Experience Platform
after 2024.q4.7
HIGH 8.6
CVE-2025-4581
Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4 ,2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.…
Digital Experience Platform
after 2025.q1.4
MEDIUM 5.0
CVE-2025-4655
SSRF vulnerability in FreeMarker templates in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through …
Digital Experience Platform
2024.Q1.16 / 2025.Q1.6+
MEDIUM 6.1
CVE-2025-4576
A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.133, and Liferay DXP 2025.Q1.0 through 2025.Q1.4 ,2024…
Digital Experience Platform
after 2025.q1.4
MEDIUM 6.1
CVE-2025-4604
The vulnerable code can bypass the Captcha check in Liferay Portal 7.4.3.80 through 7.4.3.132, and Liferay DXP 2024.Q1.1 through 2024.Q1.19, 2024.Q2.…
Digital Experience Platform
after 2025.q1.15
MEDIUM 6.1
CVE-2025-4599
The fragment preview functionality in Liferay Portal 7.4.3.61 through 7.4.3.132, and Liferay DXP 2024.Q4.1 through 2024.Q4.5, 2024.Q3.1 through 2024.…
Digital Experience Platform
7.4.3.132+
CRITICAL 9.8
CVE-2025-3594
Path traversal vulnerability with the downloading and installation of Xuggler in Liferay Portal 7.0.0 through 7.4.3.4, and Liferay DXP 7.4 GA, 7.3 GA…
Digital Experience Platform
after 7.4.3.4
HIGH 7.5
CVE-2025-3526
SessionClicks in Liferay Portal 7.0.0 through 7.4.3.21, and Liferay DXP 7.4 GA through update 9, 7.3 GA through update 25, and older unsupported vers…
Digital Experience Platform
after 7.4.3.21
HIGH 7.5
CVE-2025-3602
Liferay Portal 7.4.0 through 7.4.3.97, and Liferay DXP 2023.Q3.1 through 2023.Q3.2, 7.4 GA through update 92, 7.3 GA through update 35, and 7.2 fix p…
Digital Experience Platform
after 2023.q3.2
MEDIUM 6.1
CVE-2025-4388
A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.5, 2024…
Digital Experience Platform
7.4.3.132 / 2024.Q1.13+
MEDIUM 5.4
CVE-2025-3760
A stored cross-site scripting (XSS) vulnerability exists with radio button type custom fields in Liferay Portal 7.2.0 through 7.4.3.129, and Liferay …
Digital Experience Platform
2024.Q1.13 / 2024.q3.10+