Media
CVE-2025-43823
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 437
Restablecer filtros
Media
CVE-2025-43824
Liferay Profile Widget does not prevent vCard extension spoofing
Media
CVE-2025-43825
Liferay Portal exposes sensitive user data through its Freemarker template
Media
CVE-2025-43826
Liferay Portal Vulnerable to XSS in Web Content translation
Media
CVE-2025-43827
Liferay Portal Vulnerable to IDOR via audit events
Media
CVE-2025-43817
Liferay Portal vulnerable to reflected cross-site scripting via the `redirect` parameter
Media
CVE-2025-43813
Liferay Portal vulnerable to path traversal and denial-of-service in the ComboServlet
Media
CVE-2025-43812
Liferay Portal vulnerable to cross-site scripting in the web content template
Media
CVE-2025-43820
Liferay Portal vulnerable to cross-site scripting in the Calendar widget
Media
CVE-2025-43818
Liferay Portal vulnerable to cross-site scripting in the Calendar widget
Media
CVE-2025-43815
Liferay Portal vulnerable to reflected cross-site scripting on the page configuration page
Media
CVE-2025-43811
Liferay Portal vulnerable to cross-site scripting in the related asset selector
Media
CVE-2025-43816
Liferay Portal and DXP vulnerable to a memory leak
Media
CVE-2025-43819
Liferay Portal and DXP does not properly expire sessions
Media
CVE-2025-43814
Liferay Portal and DXP audit events record password reminder answers
Media
CVE-2025-43806
Liferay Portal and DXP does not properly check permission with import and export tasks
Media
CVE-2025-43810
Liferay Portal and DXP allows users to add a note to a different virtual instance
Media
CVE-2025-43807
Liferay has a stored cross-site scripting (XSS) vulnerability via a a publication’s “Name” text field
Media
CVE-2025-43808
Liferay Portal Commerce component has Incorrect Permission Assignment for Critical Resource
Media
CVE-2025-43809
Liferay Portal Cross-Site Request Forgery (CSRF) vulnerability
Media
CVE-2025-43803
Liferay Contacts Center widget has insecure direct object reference
Media
CVE-2025-43804
Liferay search widget vulnerable to Cross-site Scripting
Media
CVE-2025-43805
Liferay Portal allows remote attackers to view display page templates via crafted URLs
Media
CVE-2025-59432
Timing Attack Vulnerability in SCRAM Authentication
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.