Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Improper Access Control

🗓️ 25 Nov 2025 09:27:04Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 3 Views

Liferay portal has improper access control enabling paid virtual products to be downloaded via guest view files.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Circl		CVE-2025-43808
19 Sep 202522:27
–circl
CNNVD		Liferay Portal和Liferay DXP 安全漏洞
21 Sep 202500:00
–cnnvd
CVE		CVE-2025-43808
19 Sep 202520:37
–cve
Cvelist		CVE-2025-43808
19 Sep 202520:37
–cvelist
EUVD		EUVD-2025-30241
3 Oct 202520:07
–euvd
Github Security Blog		Liferay Portal Commerce component has Incorrect Permission Assignment for Critical Resource
19 Sep 202521:31
–github
NVD		CVE-2025-43808
19 Sep 202521:15
–nvd
OSV		CVE-2025-43808
19 Sep 202521:15
–osv
OSV		GHSA-CHR3-W547-85HW Liferay Portal Commerce component has Incorrect Permission Assignment for Critical Resource
19 Sep 202521:31
–osv
Positive Technologies		PT-2025-38626
19 Sep 202500:00
–ptsecurity
Rows per page
Vulners
Node
liferaycom.liferay.commerce.product.type.virtual.serviceRange1.0.0–4.0.46java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.0java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.1java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.10java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.11java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.12java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.13java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.14java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.15java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.16java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.17java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.18java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.19java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.2java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.20java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.21java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.22java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.23java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.24java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.25java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.26java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.27java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.28java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.29java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.3java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.30java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.31java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.32java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.33java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.34java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.35java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.36java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.37java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.38java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.39java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.4java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.40java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.41java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.42java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.43java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.44java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.45java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.46java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.47java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.48java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.49java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.5java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.50java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.51java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.52java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.53java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.54java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.55java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.56java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.57java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.6java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.7java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.8java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.9java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.0java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.1java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.10java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.11java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.12java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.13java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.14java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.15java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.16java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.2java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.3java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.4java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.5java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.6java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.7java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.8java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.9java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.0java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.1java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.10java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.11java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.12java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.13java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.14java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.15java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.16java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.17java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.18java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.19java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.2java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.20java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.21java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.22java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.23java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.24java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.25java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.26java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.27java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.28java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.29java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.3java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.4java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.5java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.6java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.7java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.8java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.9java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.0java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.1java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.10java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.11java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.12java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.13java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.14java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.15java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.16java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.17java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.18java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.19java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.2java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.20java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.21java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.22java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.23java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.24java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.25java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.26java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.27java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.28java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.29java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.3java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.30java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.31java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.32java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.33java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.34java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.35java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.36java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.37java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.38java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.39java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.4java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.40java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.41java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.42java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.43java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.44java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.45java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.5java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.6java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.7java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.8java
OR
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.9java

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
15 Dec 2025 20:44Current
6.9Medium risk
Vulners AI Score6.9
CVSS 3.15.3
CVSS 46.9
EPSS0.00018
SSVC
Liferay portalImproper access controlPaid virtual productsGuest view filesDocuments and MediaDownload access
3