CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1725 matches found

CVE•added 2025/10/27 9:44 p.m.•19 views

CVE-2025-62260

CVE-2025-62260 affects Liferay Portal 7.4.0–7.4.3.99 and Liferay DXP 2023.Q3.1–2023.Q3.4 (also 7.4 GA up to update 92 and 7.3 GA up to update 35; older unsupported versions) where the Headless API does not limit the number of returned objects. This enables remote attackers to trigger denial-of-se...

7.5CVSS6.6AI score0.00351EPSS

Exploits0References1Affected Software2

OSV•added 2025/10/27 9:15 p.m.•5 views

CVE-2025-62262

Information exposure through log file vulnerability in LDAP import feature in Liferay Portal 7.4.0 through 7.4.3.97, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows local users t...

4.4CVSS6.1AI score0.00202EPSS

Exploits0References1

Vulnrichment•added 2025/10/27 7:38 p.m.•4 views

CVE-2025-62263

Multiple cross-site scripting XSS vulnerabilities in Liferay Portal 7.3.7 through 7.4.3.103, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 service pack 3 through update 36 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected int...

4.8CVSS5.5AI score0.00202EPSS

Exploits0References1

Positive Technologies•added 2025/10/27 12:0 a.m.•10 views

PT-2025-44059

Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.3 GA through update 35 Liferay Portal versions 7.4.0 through 7.4.3.109 Liferay DXP versions 2023.Q3.1 through 2023.Q3.4 Liferay Portal 7.4 GA through update 92 Description The software does not restrict access to APIs...

6.9CVSS6.6AI score0.00206EPSS

Exploits0References8

CNNVD•added 2025/10/27 12:0 a.m.•5 views

Liferay Portal和Liferay DXP 跨站请求伪造漏洞

Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS, and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DX...

7CVSS6.4AI score0.00167EPSS

Exploits0References2

CNNVD•added 2025/10/21 12:0 a.m.•9 views

Liferay Portal和Liferay DXP 访问控制错误漏洞

Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE based portal solution. The solution uses technologies such as EJB as well as JMS, and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DX...

6.9CVSS6.9AI score0.00162EPSS

Exploits0References1

CNNVD•added 2025/10/13 12:0 a.m.•6 views

Liferay Portal和Liferay DXP 安全漏洞

Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP...

4.8CVSS6.4AI score0.00264EPSS

Exploits0References2