Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Insecure Direct Object Reference (IDOR)

🗓️ 04 Dec 2025 06:12:25Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 2 Views

Insecure Direct Object Reference in CommerceOrderPortlet parameter exposes shipment addresses from other virtual instances.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Circl		CVE-2025-62241
13 Oct 202520:14
–circl
CNNVD		Liferay DXP 安全漏洞
13 Oct 202500:00
–cnnvd
CVE		CVE-2025-62241
13 Oct 202519:32
–cve
Cvelist		CVE-2025-62241
13 Oct 202519:32
–cvelist
EUVD		EUVD-2025-34077
13 Oct 202521:31
–euvd
Github Security Blog		Liferay Commerce Order Content Web is Vulnerable to Authorization Bypass Through User-Controlled Key
13 Oct 202521:31
–github
NVD		CVE-2025-62241
13 Oct 202520:15
–nvd
OSV		CVE-2025-62241
13 Oct 202520:15
–osv
OSV		GHSA-FHCW-PX4Q-PMVV Liferay Commerce Order Content Web is Vulnerable to Authorization Bypass Through User-Controlled Key
13 Oct 202521:31
–osv
Positive Technologies		PT-2025-41802
13 Oct 202500:00
–ptsecurity
Rows per page
Vulners
Node
liferaycom.liferay.commerce.order.content.webRange1.0.0–4.0.113java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.0java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.1java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.10java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.11java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.12java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.13java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.14java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.15java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.16java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.17java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.18java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.19java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.2java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.20java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.21java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.22java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.23java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.24java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.25java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.26java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.27java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.28java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.29java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.3java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.30java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.31java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.32java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.33java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.34java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.35java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.36java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.37java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.38java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.39java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.4java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.40java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.41java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.42java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.43java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.44java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.45java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.46java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.47java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.48java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.49java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.5java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.50java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.51java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.52java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.53java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.54java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.55java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.56java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.57java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.58java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.59java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.6java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.60java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.61java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.62java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.63java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.64java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.65java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.66java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.67java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.68java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.7java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.8java
OR
liferaycom.liferay.commerce.order.content.webMatch1.0.9java
OR
liferaycom.liferay.commerce.order.content.webMatch2.0.0java
OR
liferaycom.liferay.commerce.order.content.webMatch2.0.1java
OR
liferaycom.liferay.commerce.order.content.webMatch2.0.2java
OR
liferaycom.liferay.commerce.order.content.webMatch2.0.3java
OR
liferaycom.liferay.commerce.order.content.webMatch2.0.4java
OR
liferaycom.liferay.commerce.order.content.webMatch2.0.5java
OR
liferaycom.liferay.commerce.order.content.webMatch2.0.6java
OR
liferaycom.liferay.commerce.order.content.webMatch2.0.7java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.0java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.1java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.10java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.11java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.12java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.13java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.14java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.15java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.16java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.17java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.18java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.19java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.2java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.20java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.21java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.22java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.23java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.24java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.25java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.26java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.27java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.28java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.29java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.3java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.30java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.31java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.32java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.33java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.34java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.35java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.36java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.4java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.5java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.6java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.7java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.8java
OR
liferaycom.liferay.commerce.order.content.webMatch3.0.9java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.0java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.1java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.10java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.100java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.101java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.102java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.103java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.104java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.105java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.106java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.107java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.108java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.109java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.11java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.110java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.111java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.112java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.12java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.13java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.14java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.15java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.16java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.17java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.18java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.19java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.2java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.20java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.21java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.22java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.23java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.24java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.25java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.26java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.27java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.28java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.29java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.3java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.30java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.31java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.32java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.33java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.34java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.35java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.36java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.37java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.38java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.39java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.4java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.40java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.41java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.42java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.43java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.44java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.45java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.46java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.47java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.48java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.49java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.5java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.50java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.51java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.52java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.53java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.54java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.55java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.56java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.57java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.58java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.59java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.6java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.60java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.61java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.62java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.63java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.64java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.65java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.66java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.67java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.68java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.69java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.7java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.70java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.71java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.72java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.73java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.74java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.75java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.76java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.77java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.78java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.79java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.8java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.80java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.81java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.82java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.83java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.84java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.85java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.86java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.87java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.88java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.89java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.9java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.90java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.91java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.92java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.93java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.94java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.95java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.96java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.97java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.98java
OR
liferaycom.liferay.commerce.order.content.webMatch4.0.99java

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
03 Jun 2026 09:52Current
6.7Medium risk
Vulners AI Score6.7
CVSS 3.14.3
CVSS 45.3
EPSS0.00047
SSVC
insecure direct objectcommerce order portletshipment addressesvirtual instances
2