Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2025-43741

🗓️ 20 Aug 2025 12:15:28Reported by [email protected]Type 
nvd
 nvd🔗 web.nvd.nist.gov👁 5 Views

CVE-2025-43741: Reflected XSS in Liferay Portal; remote attacker can inject JS via assetTagNames.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Circl		CVE-2025-43741
20 Aug 202512:08
–circl
CNNVD		Liferay Portal和Liferay DXP 跨站脚本漏洞
20 Aug 202500:00
–cnnvd
CVE		CVE-2025-43741
20 Aug 202511:54
–cve
Cvelist		CVE-2025-43741
20 Aug 202511:54
–cvelist
EUVD		EUVD-2025-25271
3 Oct 202520:07
–euvd
Github Security Blog		Liferay Portal Vulnerable to Cross-Site Scripting via assetTagNames Parameter
20 Aug 202512:31
–github
OSV		CVE-2025-43741
20 Aug 202512:15
–osv
OSV		GHSA-J6P8-G3RJ-GHPM Liferay Portal Vulnerable to Cross-Site Scripting via assetTagNames Parameter
20 Aug 202512:31
–osv
Positive Technologies		PT-2025-34040 · Liferay · Liferay Portal +1
20 Aug 202500:00
–ptsecurity
RedhatCVE		CVE-2025-43741
22 Aug 202512:26
–redhatcve
Rows per page
NVD
Node
liferaydigital_experience_platformRange2024.Q1.1–2024.Q1.15
OR
liferaydigital_experience_platformRange2024.q2.0–2024.q2.13
OR
liferaydigital_experience_platformRange2024.q3.1–2024.q3.13
OR
liferaydigital_experience_platformRange2024.q4.0–2024.q4.7
OR
liferaydigital_experience_platformRange2025.Q1.0–2025.Q1.4
OR
liferaydigital_experience_platformMatch7.4update32
OR
liferaydigital_experience_platformMatch7.4update33
OR
liferaydigital_experience_platformMatch7.4update34
OR
liferaydigital_experience_platformMatch7.4update35
OR
liferaydigital_experience_platformMatch7.4update36
OR
liferaydigital_experience_platformMatch7.4update37
OR
liferaydigital_experience_platformMatch7.4update38
OR
liferaydigital_experience_platformMatch7.4update39
OR
liferaydigital_experience_platformMatch7.4update4
OR
liferaydigital_experience_platformMatch7.4update40
OR
liferaydigital_experience_platformMatch7.4update41
OR
liferaydigital_experience_platformMatch7.4update42
OR
liferaydigital_experience_platformMatch7.4update43
OR
liferaydigital_experience_platformMatch7.4update44
OR
liferaydigital_experience_platformMatch7.4update45
OR
liferaydigital_experience_platformMatch7.4update46
OR
liferaydigital_experience_platformMatch7.4update47
OR
liferaydigital_experience_platformMatch7.4update48
OR
liferaydigital_experience_platformMatch7.4update49
OR
liferaydigital_experience_platformMatch7.4update5
OR
liferaydigital_experience_platformMatch7.4update50
OR
liferaydigital_experience_platformMatch7.4update51
OR
liferaydigital_experience_platformMatch7.4update52
OR
liferaydigital_experience_platformMatch7.4update53
OR
liferaydigital_experience_platformMatch7.4update54
OR
liferaydigital_experience_platformMatch7.4update55
OR
liferaydigital_experience_platformMatch7.4update56
OR
liferaydigital_experience_platformMatch7.4update57
OR
liferaydigital_experience_platformMatch7.4update58
OR
liferaydigital_experience_platformMatch7.4update59
OR
liferaydigital_experience_platformMatch7.4update6
OR
liferaydigital_experience_platformMatch7.4update60
OR
liferaydigital_experience_platformMatch7.4update61
OR
liferaydigital_experience_platformMatch7.4update62
OR
liferaydigital_experience_platformMatch7.4update63
OR
liferaydigital_experience_platformMatch7.4update64
OR
liferaydigital_experience_platformMatch7.4update65
OR
liferaydigital_experience_platformMatch7.4update66
OR
liferaydigital_experience_platformMatch7.4update67
OR
liferaydigital_experience_platformMatch7.4update68
OR
liferaydigital_experience_platformMatch7.4update69
OR
liferaydigital_experience_platformMatch7.4update7
OR
liferaydigital_experience_platformMatch7.4update70
OR
liferaydigital_experience_platformMatch7.4update71
OR
liferaydigital_experience_platformMatch7.4update72
OR
liferaydigital_experience_platformMatch7.4update73
OR
liferaydigital_experience_platformMatch7.4update74
OR
liferaydigital_experience_platformMatch7.4update75
OR
liferaydigital_experience_platformMatch7.4update76
OR
liferaydigital_experience_platformMatch7.4update77
OR
liferaydigital_experience_platformMatch7.4update78
OR
liferaydigital_experience_platformMatch7.4update79
OR
liferaydigital_experience_platformMatch7.4update8
OR
liferaydigital_experience_platformMatch7.4update80
OR
liferaydigital_experience_platformMatch7.4update81
OR
liferaydigital_experience_platformMatch7.4update82
OR
liferaydigital_experience_platformMatch7.4update83
OR
liferaydigital_experience_platformMatch7.4update84
OR
liferaydigital_experience_platformMatch7.4update85
OR
liferaydigital_experience_platformMatch7.4update86
OR
liferaydigital_experience_platformMatch7.4update87
OR
liferaydigital_experience_platformMatch7.4update88
OR
liferaydigital_experience_platformMatch7.4update89
OR
liferaydigital_experience_platformMatch7.4update9
OR
liferaydigital_experience_platformMatch7.4update90
OR
liferaydigital_experience_platformMatch7.4update91
OR
liferaydigital_experience_platformMatch7.4update92
OR
liferayliferay_portalRange7.4.0–7.4.3.132

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
15 Dec 2025 19:51Current
CVSS 3.15.4
CVSS 45.1
EPSS0.00044
CWE-79
liferay portalcross site scriptingasset tag namesremote attacker
5