Liferay

Dxp

152 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.1

CVE-2025-43830

  • EPSS -
  • Published 08.10.2025 13:11:37
  • Last modified 08.10.2025 13:11:37

Stored cross-site scripting (XSS) vulnerability in Forms in Liferay Portal 7.3.2 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and 7.3 GA through update 35 allows remote attacke...

4.8

CVE-2025-43821

  • EPSS -
  • Published 08.10.2025 12:53:20
  • Last modified 08.10.2025 13:15:34

Cross-site scripting (XSS) vulnerability in the Commerce Product Comparison Table widget in Liferay Portal 7.4.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 GA through update 92 allows remote a...

4.8

CVE-2025-43822

  • EPSS -
  • Published 07.10.2025 22:16:03
  • Last modified 07.10.2025 23:15:33

Multiple stored cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.4.3.15 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 update 15 through update 92 allow remote attackers to inject ar...

4.8

CVE-2025-43823

  • EPSS -
  • Published 07.10.2025 21:54:54
  • Last modified 07.10.2025 22:15:34

Cross-site scripting (XSS) vulnerability in the Commerce Search Result widget in Liferay Portal 7.4.0 through 7.4.3.111, and Liferay DXP 2023.Q4 before patch 6, 2023.Q3 before patch 9, and 7.4 GA through update 92 allows remote attackers to inject ar...

4.8

CVE-2025-43824

  • EPSS 0.16%
  • Published 06.10.2025 22:15:37
  • Last modified 06.10.2025 22:15:37

The Profile widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and older unsupported versions uses a user’s name in the...

4.6

CVE-2025-43825

  • EPSS 0.04%
  • Published 03.10.2025 21:16:28
  • Last modified 06.10.2025 14:56:47

A vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4, 2024.Q4.0 through 2024.Q4.5, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 2023.Q4.0 through 2023.Q4.1...

4.8

CVE-2025-43826

  • EPSS 0.17%
  • Published 30.09.2025 23:15:29
  • Last modified 02.10.2025 19:12:17

Stored cross-site scripting (XSS) vulnerabilities in Web Content translation in Liferay Portal 7.4.0 through 7.4.3.112, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 9...

5.3

CVE-2025-43827

  • EPSS 0.14%
  • Published 30.09.2025 19:15:37
  • Last modified 02.10.2025 19:12:17

Insecure Direct Object Reference (IDOR) vulnerability with audit events in Liferay Portal 7.4.0 through 7.4.3.117, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10...

4.8

CVE-2025-43812

  • EPSS 0.17%
  • Published 29.09.2025 23:15:31
  • Last modified 02.10.2025 19:12:42

Cross-site scripting (XSS) vulnerability in web content template in Liferay Portal 7.4.3.4 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.8, and 7.4 GA through update 92 allows remote authenticated users to ...

6.9

CVE-2025-43813

  • EPSS 0.24%
  • Published 29.09.2025 23:15:31
  • Last modified 02.10.2025 19:12:42

Possible path traversal vulnerability and denial-of-service in the ComboServlet in Liferay Portal 7.4.0 through 7.4.3.107, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update...