Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in

Improper Access Control

🗓️ 25 Nov 2025 09:27:04Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 17 Views

Liferay portal has improper access control enabling paid virtual products to be downloaded via guest view files.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
circl
Circl		CVE-2025-43808
19 Sep 202522:27
–circl
cnnvd
CNNVD		Liferay Portal和Liferay DXP 安全漏洞
21 Sep 202500:00
–cnnvd
cve
CVE		CVE-2025-43808
19 Sep 202520:37
–cve
cvelist
Cvelist		CVE-2025-43808
19 Sep 202520:37
–cvelist
euvd
EUVD		EUVD-2025-30241
3 Oct 202520:07
–euvd
github
Github Security Blog		Liferay Portal Commerce component has Incorrect Permission Assignment for Critical Resource
19 Sep 202521:31
–github
nvd
NVD		CVE-2025-43808
19 Sep 202521:15
–nvd
osv
OSV		GHSA-CHR3-W547-85HW Liferay Portal Commerce component has Incorrect Permission Assignment for Critical Resource
19 Sep 202521:31
–osv
ptsecurity
Positive Technologies		PT-2025-38626
19 Sep 202500:00
–ptsecurity
rapid7
Rapid7 Vulnerability Database (full)		CVE-2025-43808: Incorrect Permission Assignment for Critical Resource
19 Sep 202500:00
–rapid7
Rows per page
Vulners
Node
OR
liferaycom.liferay.commerce.product.type.virtual.serviceRange1.0.0–4.0.46java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.0java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.1java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.10java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.11java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.12java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.13java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.14java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.15java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.16java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.17java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.18java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.19java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.2java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.20java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.21java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.22java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.23java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.24java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.25java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.26java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.27java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.28java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.29java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.3java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.30java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.31java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.32java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.33java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.34java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.35java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.36java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.37java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.38java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.39java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.4java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.40java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.41java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.42java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.43java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.44java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.45java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.46java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.47java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.48java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.49java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.5java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.50java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.51java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.52java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.53java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.54java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.55java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.56java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.57java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.6java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.7java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.8java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch1.0.9java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.0java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.1java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.10java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.11java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.12java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.13java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.14java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.15java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.16java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.2java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.3java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.4java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.5java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.6java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.7java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.8java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch2.0.9java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.0java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.1java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.10java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.11java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.12java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.13java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.14java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.15java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.16java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.17java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.18java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.19java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.2java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.20java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.21java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.22java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.23java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.24java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.25java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.26java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.27java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.28java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.29java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.3java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.4java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.5java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.6java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.7java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.8java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch3.0.9java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.0java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.1java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.10java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.11java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.12java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.13java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.14java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.15java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.16java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.17java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.18java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.19java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.2java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.20java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.21java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.22java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.23java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.24java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.25java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.26java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.27java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.28java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.29java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.3java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.30java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.31java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.32java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.33java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.34java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.35java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.36java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.37java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.38java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.39java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.4java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.40java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.41java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.42java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.43java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.44java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.45java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.5java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.6java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.7java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.8java
liferaycom.liferay.commerce.product.type.virtual.serviceMatch4.0.9java

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
15 Dec 2025 20:44Current
5.9Medium risk
Vulners AI Score5.9
CVSS 3.15.3
CVSS 46.9
EPSS0.00371
SSVC
Liferay portalImproper access controlPaid virtual productsGuest view filesDocuments and MediaDownload access
17