Com.liferay

140 tracked vulnerabilities.

CVE-2025-62275 MEDIUM
Liferay Digital Experience Platform - Incorrect Authorization
Nov 01, 2025
CVSS 5.3
EPSS 0.00
CVE-2025-62276 MEDIUM
Liferay Portal <7.4.3.111 - Info Disclosure
Nov 01, 2025
CVSS 5.5
EPSS 0.00
CVE-2025-62267 MEDIUM
Liferay Digital Experience Platform < 7.4.3.112 - XSS
Oct 31, 2025
CVSS 6.1
EPSS 0.00
CVE-2025-62262 MEDIUM
Liferay Digital Experience Platform - Log Information Exposure
Oct 27, 2025
CVSS 4.4
EPSS 0.00
CVE-2025-62263 MEDIUM
Liferay Digital Experience Platform < 7.4.3.104 - XSS
Oct 27, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-62253 MEDIUM
Liferay Digital Experience Platform < 7.3 - Open Redirect
Oct 27, 2025
CVSS 6.1
EPSS 0.00
CVE-2025-62255 MEDIUM
Liferay Digital Experience Platform < 7.3 - XSS
Oct 23, 2025
CVSS 6.1
EPSS 0.00
CVE-2025-62256 MEDIUM
Liferay Digital Experience Platform - Missing Authorization
Oct 23, 2025
CVSS 5.3
EPSS 0.00
CVE-2025-62247 MEDIUM
Liferay Digital Experience Platform - Missing Authorization
Oct 22, 2025
CVSS 6.5
EPSS 0.00
CVE-2025-62248 MEDIUM
Liferay Digital Experience Platform < 2024.q1.20 - XSS
Oct 22, 2025
CVSS 4.8
EPSS 0.00
CVE-2025-62250 MEDIUM
Liferay Digital Experience Platform < 7.3 - Origin Validation Error
Oct 21, 2025
CVSS 6.5
EPSS 0.00
CVE-2025-62251 MEDIUM
Liferay Digital Experience Platform - Incorrect Permission Assignment
Oct 13, 2025
CVSS 6.5
EPSS 0.00
CVE-2025-62246 MEDIUM
Liferay Digital Experience Platform < 7.4 - XSS
Oct 13, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-62242 MEDIUM
Liferay Digital Experience Platform < 7.4.3.112 - IDOR
Oct 13, 2025
CVSS 4.3
EPSS 0.00
CVE-2025-62243 MEDIUM
Liferay Digital Experience Platform - Incorrect Authorization
Oct 13, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-62244 MEDIUM
Liferay Digital Experience Platform < 2023.q3.9 - IDOR
Oct 13, 2025
CVSS 4.3
EPSS 0.00
CVE-2025-62245 MEDIUM
Liferay Digital Experience Platform < 2023.Q3.10 - CSRF
Oct 10, 2025
CVSS 4.3
EPSS 0.00
CVE-2025-62239 MEDIUM
Liferay Digital Experience Platform < 2023.q3.9 - XSS
Oct 10, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-62238 MEDIUM
Liferay Digital Experience Platform < 2023.q3.9 - XSS
Oct 10, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-62240 MEDIUM
Liferay Digital Experience Platform < 2023.Q3.8 - XSS
Oct 09, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-43771 MEDIUM
Liferay Digital Experience Platform < 2023.Q3.4 - XSS
Oct 08, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-43825 MEDIUM
Liferay Portal <7.4.3.132 & DXP - Info Disclosure
Oct 03, 2025
CVSS 6.5
EPSS 0.00
CVE-2025-43827 MEDIUM
Liferay Digital Experience Platform < 7.3 - IDOR
Sep 30, 2025
CVSS 4.3
EPSS 0.00
CVE-2025-43812 MEDIUM
Liferay Digital Experience Platform < 2023.q3.9 - XSS
Sep 29, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-43820 MEDIUM
Liferay Digital Experience Platform < 2023.Q3.7 - XSS
Sep 29, 2025
CVSS 5.4
EPSS 0.00
Products
com.liferay.portal.search.web 5 com.liferay.frontend.taglib.clay 5 com.liferay.change.tracking.web 4 com.liferay.dynamic.data.mapping.form.field.type 4 com.liferay.portal.vulcan.impl 4 com.liferay.frontend.editor.ckeditor.web 3 com.liferay.dynamic.data.mapping.form.web 3 com.liferay.layout.admin.web 3 com.liferay.login.web 3 com.liferay.users.admin.web 3 com.liferay.account.admin.web 3 com.liferay.object.service 3 com.liferay.calendar.web 3 com.liferay.site.admin.web 2 com.liferay.server.admin.web 2 com.liferay.translation.web 2 com.liferay.portal.security.ldap.impl 2 com.liferay.asset.taglib 2 com.liferay.organizations.item.selector.web 2 com.liferay.portal.workflow.kaleo.designer.web 2 com.liferay.layout.impl 2 com.liferay.layout.taglib 2 com.liferay.document.library.web 2 com.liferay.object.web 2 com.liferay.frontend.taglib 2 com.liferay.frontend.js.web 2 com.liferay.journal.web 2 com.liferay.portal.workflow.kaleo.forms.web 2 com.liferay.adaptive.media.web 2 com.liferay.fragment.service 1
Quick Filters
Critical CVEs With Exploits In CISA KEV