Lucene search
K

Reflected Cross-site Scripting (XSS)

🗓️ 19 Nov 2025 09:36:47Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode
🔗 sca.analysiscenter.veracode.com👁 3 Views

Liferay portal is vulnerable to reflected cross site scripting via improper validation of redirect parameter in Announcements and Alerts.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2025-43817
29 Sep 202523:00
circl
CNNVD
Liferay Portal和Liferay DXP 跨站脚本漏洞
29 Sep 202500:00
cnnvd
CVE
CVE-2025-43817
29 Sep 202522:30
cve
Cvelist
CVE-2025-43817
29 Sep 202522:30
cvelist
EUVD
EUVD-2025-31656
3 Oct 202520:07
euvd
Github Security Blog
Liferay Portal vulnerable to reflected cross-site scripting via the `redirect` parameter
30 Sep 202500:30
github
NVD
CVE-2025-43817
29 Sep 202523:15
nvd
OSV
CVE-2025-43817
29 Sep 202523:15
osv
OSV
GHSA-M4HG-46PW-6MMV Liferay Portal vulnerable to reflected cross-site scripting via the `redirect` parameter
30 Sep 202500:30
osv
Positive Technologies
PT-2025-39913
29 Sep 202500:00
ptsecurity
Rows per page
Vulners
Node
liferayrelease.portal.bomRange7.4.3.747.4.3.111-ga111java
OR
liferayrelease.portal.bomMatch7.4.3.100java
OR
liferayrelease.portal.bomMatch7.4.3.101java
OR
liferayrelease.portal.bomMatch7.4.3.102java
OR
liferayrelease.portal.bomMatch7.4.3.103java
OR
liferayrelease.portal.bomMatch7.4.3.104java
OR
liferayrelease.portal.bomMatch7.4.3.105java
OR
liferayrelease.portal.bomMatch7.4.3.106java
OR
liferayrelease.portal.bomMatch7.4.3.107java
OR
liferayrelease.portal.bomMatch7.4.3.112java
OR
liferayrelease.portal.bomMatch7.4.3.75java
OR
liferayrelease.portal.bomMatch7.4.3.76java
OR
liferayrelease.portal.bomMatch7.4.3.77java
OR
liferayrelease.portal.bomMatch7.4.3.78java
OR
liferayrelease.portal.bomMatch7.4.3.79java
OR
liferayrelease.portal.bomMatch7.4.3.80java
OR
liferayrelease.portal.bomMatch7.4.3.81java
OR
liferayrelease.portal.bomMatch7.4.3.82java
OR
liferayrelease.portal.bomMatch7.4.3.83java
OR
liferayrelease.portal.bomMatch7.4.3.84java
OR
liferayrelease.portal.bomMatch7.4.3.85java
OR
liferayrelease.portal.bomMatch7.4.3.85-ga85java
OR
liferayrelease.portal.bomMatch7.4.3.86java
OR
liferayrelease.portal.bomMatch7.4.3.87java
OR
liferayrelease.portal.bomMatch7.4.3.88java
OR
liferayrelease.portal.bomMatch7.4.3.89java
OR
liferayrelease.portal.bomMatch7.4.3.90java
OR
liferayrelease.portal.bomMatch7.4.3.91java
OR
liferayrelease.portal.bomMatch7.4.3.92java
OR
liferayrelease.portal.bomMatch7.4.3.93java
OR
liferayrelease.portal.bomMatch7.4.3.94java
OR
liferayrelease.portal.bomMatch7.4.3.95java
OR
liferayrelease.portal.bomMatch7.4.3.95-1java
OR
liferayrelease.portal.bomMatch7.4.3.96java
OR
liferayrelease.portal.bomMatch7.4.3.97java
OR
liferayrelease.portal.bomMatch7.4.3.98java
OR
liferayrelease.portal.bomMatch7.4.3.99java

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

13 Dec 2025 05:01Current
6.3Medium risk
Vulners AI Score6.3
CVSS 3.16.1
CVSS 44.8
EPSS0.00033
SSVC
3