Media
CVE-2025-62264
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 159
Restablecer filtros
Media
CVE-2025-62265
Liferay Portal is vulnerable to XSS in the Blogs widget
Media
CVE-2025-62266
Liferay Portal is vulnerable to DNS rebinding attacks
Media
CVE-2025-62257
Liferay Portal vulnerable to password enumeration
Alta
CVE-2025-62260
Liferay Portal Vulnerable to DoS via Crafted Headless API Request
Alta
CVE-2025-62258
Liferay Portal Vulnerable to CSRF in Headless APIs
Media
CVE-2025-62259
Liferay Portal Does Not Limit Access to APIs Before Email Verification
Media
CVE-2025-62261
Liferay Portal Stores Password Reset Tokens in Plain Text
Media
CVE-2025-43830
Liferay Portal is vulnerable to Stored XSS through Forms text type field
Media
CVE-2025-43822
Liferay Portal has multiple Stored XSS vulnerabilities on its View Order page
Media
CVE-2025-43823
Liferay Portal is vulnerable to XSS through its Commerce Search Result widget
Media
CVE-2025-43824
Liferay Profile Widget does not prevent vCard extension spoofing
Media
CVE-2025-43826
Liferay Portal Vulnerable to XSS in Web Content translation
Media
CVE-2025-43817
Liferay Portal vulnerable to reflected cross-site scripting via the `redirect` parameter
Media
CVE-2025-43813
Liferay Portal vulnerable to path traversal and denial-of-service in the ComboServlet
Media
CVE-2025-43812
Liferay Portal vulnerable to cross-site scripting in the web content template
Media
CVE-2025-43820
Liferay Portal vulnerable to cross-site scripting in the Calendar widget
Media
CVE-2025-43799
Liferay Portal Uses Default Password
Media
CVE-2025-43785
Liferay Portal and Liferay DXP vulnerable to Stored Cross-site Scripting
Media
CVE-2025-43776
Liferay Portal and Liferay DXP vulnerable to store Cross-site Scripting
Media
CVE-2025-43760
Liferay Portal Reflected Cross-Site Scripting Vulnerability via PortalUtil.escapeRedirect
Media
CVE-2025-43752
Liferay Portal's Unlimited File Upload Could Result in DoS
Media
CVE-2025-43754
Liferay Portal Username Enumeration Vulnerability
Media
CVE-2025-43756
Liferay Portal Reflected Cross-Site Scripting Vulnerability via snippet Parameter
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.