Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2025/10/23 8:16 p.m.•29 views

CVE-2025-62247

Missing Authorization in Collection Provider component in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.19...

6.5CVSS6.7AI score0.00268EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2025/10/22 9:31 p.m.•19 views

Liferay Portal and DXP are Missing Authorization in Collection Provider

Missing Authorization in Collection Provider component in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.19...

6.5CVSS6.8AI score0.00268EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
•added 2025/10/22 9:31 p.m.•16 views

EUVD-2025-35627

Liferay Portal and DXP are Missing Authorization in Collection Provider...

2CVSS6.4AI score0.00268EPSS
SaveExploits0References4
NVD
NVD
•added 2025/10/22 8:15 p.m.•18 views

CVE-2025-62247

Missing Authorization in Collection Provider component in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.19...

6.5CVSS0.00268EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/22 7:27 p.m.•32 views

CVE-2025-62247

CVE-2025-62247 affects Liferay Portal 7.4.0–7.4.3.132 and Liferay DXP 2025.Q2.0–Q2.9, 2025.Q1.0–Q1.16, 2024.Q4.0–Q4.7, 2024.Q3.1–Q3.13, 2024.Q2.0–Q2.13, 2024.Q1.1–Q1.19. The root cause is Missing Authorization in the Collection Provider component, allowing instance users to read and select unauth...

6.5CVSS6.3AI score0.00268EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
•added 2025/10/22 7:27 p.m.•5 views

CVE-2025-62247

Missing Authorization in Collection Provider component in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.19...

2CVSS6.3AI score0.00268EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/22 7:27 p.m.•22 views

CVE-2025-62247

Missing Authorization in Collection Provider component in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.19...

2CVSS0.00268EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•20 views

Liferay Portal和Liferay DXP 安全漏洞

Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP...

6.5CVSS6.4AI score0.00268EPSS
SaveExploits0References2
Rows per page
Query Builder