Medium
CVE-2025-43801
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 437
Reset filters
Medium
CVE-2025-43802
Liferay Stored Cross-site Scripting vulnerability
Medium
CVE-2025-43797
Liferay has Insecure Default Initialization of Resource issue
Medium
CVE-2025-43799
Liferay Portal Uses Default Password
Low
CVE-2025-43798
Liferay DXP Missing Critical Step in Authentication
Medium
CVE-2025-43800
Liferay Portal Cross-site Scripting (XSS) vulnerability
Medium
CVE-2025-43791
Liferay Portal vulnerable to Cross-site Scripting
Low
CVE-2025-43792
Liferay Portal has External Control of System or Configuration Settings
Medium
CVE-2025-43793
Liferay Portal has Improper Validation of Specified Quantity in Input
Medium
CVE-2025-43794
Liferay Portal has stored cross-site scripting (XSS) vulnerability
Medium
CVE-2025-43795
Liferay Portal's System, Instance and Site Settings are vulnerable to Open Redirect
High
CVE-2025-43796
Liferay Portal: Missing Rate Limiting in GraphQL Endpoint Enables Resource Exhaustion Attack
Medium
CVE-2025-43787
Liferay Portal's selection modal is vulnerable to XSS
Medium
CVE-2025-43788
Liferay Portal's Organization Selector exposes organization data to remote authenticated users
Low
CVE-2025-43789
Liferay Portal JSON Web Services Direct Class Invocation Enables Service Access Policy Execution
High
CVE-2025-43790
Liferay Portal is vulnerable to Insecure Direct Object Reference (IDOR) attack through Authentication Bypass
Medium
CVE-2025-43782
Liferay Portal API Allows Authenticated Users to Access Workflow Definitions by Name
Medium
CVE-2025-43783
Liferay Portal is vulnerable to Reflected XSS attack through get_editor path
Medium
CVE-2025-43784
Liferay Portal's Incorrect Authorization vulnerability can lead to guest users to obtaining sensitive data
Medium
CVE-2025-43785
Liferay Portal and Liferay DXP vulnerable to Stored Cross-site Scripting
Medium
CVE-2025-43786
Liferay Portal exposes ERC which can lead to exploit the time response attack
Medium
CVE-2025-43781
Liferay Portal is vulnerable to XSS attack through its search bar portlet
Medium
CVE-2025-43775
Liferay Portal is vulnerable to XSS attacks via its remote app title field
Medium
CVE-2025-43776
Liferay Portal and Liferay DXP vulnerable to store Cross-site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.