Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

CVE-2025-43794

🗓️ 15 Sep 2025 12:15:33Reported by [email protected]Type 
nvd
 nvd🔗 web.nvd.nist.gov👁 12 Views

Stored cross-site scripting lets authenticated administrators inject scripts via Instance Configuration CDN Host HTTP and HTTPS fields.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
circl
Circl		CVE-2025-43794
15 Sep 202514:14
–circl
cnnvd
CNNVD		Liferay Portal和Liferay DXP 跨站脚本漏洞
15 Sep 202500:00
–cnnvd
cve
CVE		CVE-2025-43794
15 Sep 202511:17
–cve
cvelist
Cvelist		CVE-2025-43794
15 Sep 202511:17
–cvelist
euvd
EUVD		EUVD-2025-29168
3 Oct 202520:07
–euvd
github
Github Security Blog		Liferay Portal has stored cross-site scripting (XSS) vulnerability
15 Sep 202512:31
–github
osv
OSV		GHSA-R45V-2289-JGR4 Liferay Portal has stored cross-site scripting (XSS) vulnerability
15 Sep 202512:31
–osv
ptsecurity
Positive Technologies		PT-2025-37471
15 Sep 202500:00
–ptsecurity
redhatcve
RedhatCVE		CVE-2025-43794
17 Sep 202511:36
–redhatcve
snyk
Snyk		Cross-site Scripting (XSS)
15 Sep 202512:31
–snyk
Rows per page
NVD
Node
OR
liferaydigital_experience_platformRange<7.3
liferaydigital_experience_platformRange2023.q3.1–2023.q3.5
liferaydigital_experience_platformMatch7.3-
liferaydigital_experience_platformMatch7.3fix_pack_1
liferaydigital_experience_platformMatch7.3fix_pack_2
liferaydigital_experience_platformMatch7.3service_pack_1
liferaydigital_experience_platformMatch7.3service_pack_2
liferaydigital_experience_platformMatch7.3service_pack_3
liferaydigital_experience_platformMatch7.3update1
liferaydigital_experience_platformMatch7.3update10
liferaydigital_experience_platformMatch7.3update11
liferaydigital_experience_platformMatch7.3update12
liferaydigital_experience_platformMatch7.3update13
liferaydigital_experience_platformMatch7.3update14
liferaydigital_experience_platformMatch7.3update15
liferaydigital_experience_platformMatch7.3update16
liferaydigital_experience_platformMatch7.3update17
liferaydigital_experience_platformMatch7.3update18
liferaydigital_experience_platformMatch7.3update19
liferaydigital_experience_platformMatch7.3update2
liferaydigital_experience_platformMatch7.3update20
liferaydigital_experience_platformMatch7.3update21
liferaydigital_experience_platformMatch7.3update22
liferaydigital_experience_platformMatch7.3update23
liferaydigital_experience_platformMatch7.3update24
liferaydigital_experience_platformMatch7.3update25
liferaydigital_experience_platformMatch7.3update26
liferaydigital_experience_platformMatch7.3update27
liferaydigital_experience_platformMatch7.3update28
liferaydigital_experience_platformMatch7.3update29
liferaydigital_experience_platformMatch7.3update3
liferaydigital_experience_platformMatch7.3update30
liferaydigital_experience_platformMatch7.3update31
liferaydigital_experience_platformMatch7.3update32
liferaydigital_experience_platformMatch7.3update33
liferaydigital_experience_platformMatch7.3update34
liferaydigital_experience_platformMatch7.3update35
liferaydigital_experience_platformMatch7.3update4
liferaydigital_experience_platformMatch7.3update5
liferaydigital_experience_platformMatch7.3update6
liferaydigital_experience_platformMatch7.3update7
liferaydigital_experience_platformMatch7.3update8
liferaydigital_experience_platformMatch7.3update9
liferaydigital_experience_platformMatch7.4-
liferaydigital_experience_platformMatch7.4update1
liferaydigital_experience_platformMatch7.4update10
liferaydigital_experience_platformMatch7.4update11
liferaydigital_experience_platformMatch7.4update12
liferaydigital_experience_platformMatch7.4update13
liferaydigital_experience_platformMatch7.4update14
liferaydigital_experience_platformMatch7.4update15
liferaydigital_experience_platformMatch7.4update16
liferaydigital_experience_platformMatch7.4update17
liferaydigital_experience_platformMatch7.4update18
liferaydigital_experience_platformMatch7.4update19
liferaydigital_experience_platformMatch7.4update2
liferaydigital_experience_platformMatch7.4update20
liferaydigital_experience_platformMatch7.4update21
liferaydigital_experience_platformMatch7.4update22
liferaydigital_experience_platformMatch7.4update23
liferaydigital_experience_platformMatch7.4update24
liferaydigital_experience_platformMatch7.4update25
liferaydigital_experience_platformMatch7.4update26
liferaydigital_experience_platformMatch7.4update27
liferaydigital_experience_platformMatch7.4update28
liferaydigital_experience_platformMatch7.4update29
liferaydigital_experience_platformMatch7.4update3
liferaydigital_experience_platformMatch7.4update30
liferaydigital_experience_platformMatch7.4update31
liferaydigital_experience_platformMatch7.4update32
liferaydigital_experience_platformMatch7.4update33
liferaydigital_experience_platformMatch7.4update34
liferaydigital_experience_platformMatch7.4update35
liferaydigital_experience_platformMatch7.4update36
liferaydigital_experience_platformMatch7.4update37
liferaydigital_experience_platformMatch7.4update38
liferaydigital_experience_platformMatch7.4update39
liferaydigital_experience_platformMatch7.4update4
liferaydigital_experience_platformMatch7.4update40
liferaydigital_experience_platformMatch7.4update41
liferaydigital_experience_platformMatch7.4update42
liferaydigital_experience_platformMatch7.4update43
liferaydigital_experience_platformMatch7.4update44
liferaydigital_experience_platformMatch7.4update45
liferaydigital_experience_platformMatch7.4update46
liferaydigital_experience_platformMatch7.4update47
liferaydigital_experience_platformMatch7.4update48
liferaydigital_experience_platformMatch7.4update49
liferaydigital_experience_platformMatch7.4update5
liferaydigital_experience_platformMatch7.4update50
liferaydigital_experience_platformMatch7.4update51
liferaydigital_experience_platformMatch7.4update52
liferaydigital_experience_platformMatch7.4update53
liferaydigital_experience_platformMatch7.4update54
liferaydigital_experience_platformMatch7.4update55
liferaydigital_experience_platformMatch7.4update56
liferaydigital_experience_platformMatch7.4update57
liferaydigital_experience_platformMatch7.4update58
liferaydigital_experience_platformMatch7.4update59
liferaydigital_experience_platformMatch7.4update6
liferaydigital_experience_platformMatch7.4update60
liferaydigital_experience_platformMatch7.4update61
liferaydigital_experience_platformMatch7.4update62
liferaydigital_experience_platformMatch7.4update63
liferaydigital_experience_platformMatch7.4update64
liferaydigital_experience_platformMatch7.4update65
liferaydigital_experience_platformMatch7.4update66
liferaydigital_experience_platformMatch7.4update67
liferaydigital_experience_platformMatch7.4update68
liferaydigital_experience_platformMatch7.4update69
liferaydigital_experience_platformMatch7.4update7
liferaydigital_experience_platformMatch7.4update70
liferaydigital_experience_platformMatch7.4update71
liferaydigital_experience_platformMatch7.4update72
liferaydigital_experience_platformMatch7.4update73
liferaydigital_experience_platformMatch7.4update74
liferaydigital_experience_platformMatch7.4update75
liferaydigital_experience_platformMatch7.4update76
liferaydigital_experience_platformMatch7.4update77
liferaydigital_experience_platformMatch7.4update78
liferaydigital_experience_platformMatch7.4update79
liferaydigital_experience_platformMatch7.4update8
liferaydigital_experience_platformMatch7.4update80
liferaydigital_experience_platformMatch7.4update81
liferaydigital_experience_platformMatch7.4update82
liferaydigital_experience_platformMatch7.4update83
liferaydigital_experience_platformMatch7.4update84
liferaydigital_experience_platformMatch7.4update85
liferaydigital_experience_platformMatch7.4update86
liferaydigital_experience_platformMatch7.4update87
liferaydigital_experience_platformMatch7.4update88
liferaydigital_experience_platformMatch7.4update89
liferaydigital_experience_platformMatch7.4update9
liferaydigital_experience_platformMatch7.4update90
liferaydigital_experience_platformMatch7.4update91
liferaydigital_experience_platformMatch7.4update92
liferaydigital_experience_platformMatch2023.q4.0
liferayliferay_portalRange<7.4.3.112

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 09:24Current
CVSS 3.14.8
CVSS 44.6
EPSS0.00219
CWE-79
Cross site scriptingLiferay PortalVersion rangeAdministrator accessInstance ConfigurationCDN Host fieldArbitrary web script
12