Media
CVE-2025-12390
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.073
Restablecer filtros
Alta
CVE-2025-62260
Liferay Portal Vulnerable to DoS via Crafted Headless API Request
Alta
CVE-2025-62258
Liferay Portal Vulnerable to CSRF in Headless APIs
Media
CVE-2025-62259
Liferay Portal Does Not Limit Access to APIs Before Email Verification
Media
CVE-2025-62261
Liferay Portal Stores Password Reset Tokens in Plain Text
Media
CVE-2025-62262
Liferay Portal Vulnerable to Information Exposure Through a Log File Vulnerability in LDAP Import Feature
Media
CVE-2025-62263
Liferay Portal Vulnerable to Cross-Site Scripting
Media
CVE-2025-62253
Liferay Portal Vulnerable to Open Redirect via the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_redirect parameter
Alta
CVE-2025-11419
Keycloak TLS Client-Initiated Renegotiation Denial of Service
Media
CVE-2025-62782
InventoryGui allows item duplication with experimental "Bundle" item in GUIs which use GuiStorageElement
Media
CVE-2025-62783
InventoryGui affected by item duplication in GUIs which use GuiStorageElement
Baja
CVE-2025-55754
Apache Tomcat Vulnerable to Improper Neutralization of Escape, Meta, or Control Sequences
Alta
CVE-2025-55752
Apache Tomcat Vulnerable to Relative Path Traversal
Baja
CVE-2025-61795
Apache Tomcat Vulnerable to Improper Resource Shutdown or Release
Media
CVE-2025-12194
Bouncy Castle Vulnerable to Uncontrolled Resource Consumption
Media
CVE-2025-62254
Liferay Portal ComboServlet denial of service via large file combination
Baja
CVE-2025-62255
Liferay Portal Self Cross-site scripting (XSS) vulnerability on the edit Knowledge Base article page
Media
CVE-2025-60837
MCMS reflected cross-site scripting (XSS) vulnerability
Media
CVE-2025-11429
Keycloak does not invalidate sessions when "Remember Me" is disabled
Media
CVE-2025-12110
Keycloak does not invalidate offline sessions when the offline_access scope is removed
Media
CVE-2025-62256
Liferay Portal and DXP do not properly restrict access to OpenAPI
Baja
CVE-2025-62247
Liferay Portal and DXP are Missing Authorization in Collection Provider
Media
CVE-2025-62248
Liferay Portal and Liferay DXP vulnerable to reflected cross-site scripting (XSS)
Media
CVE-2025-62710
Sakai kernel-impl: predictable PRNG used to generate server‑side encryption key in EncryptionUtilityServiceImpl
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.