DeutschShown in its original language — a full translation is planned for a future version.
Liferay Portal und DXP: Mehrere Schwachstellen
view advisory published 2025-09-15
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Liferay DXP und Liferay Portal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-43802US | medium6.1 | — | ||
Stored cross-site scripting (XSS) vulnerability in a custom object’s /o/c/<object-name> API endpoint in Liferay Portal 7.4.3.51 through 7.4.3.109, and Liferay DXP 2023.Q3.1 through… | ||||
| CVE-2025-43797US | medium5.4OT elevated | — | ||
In Liferay Portal 7.1.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported version… | ||||
| CVE-2025-43799US | medium6.5OT elevated | — | ||
Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 3… | ||||
| CVE-2025-43798US | medium6.5 | — | ||
Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 35 allows a time-based one-time password (TOTP) to be used multiple times dur… | ||||
| CVE-2025-43800US | medium6.1 | — | ||
Cross-site scripting (XSS) vulnerability in Objects in Liferay Portal 7.4.3.20 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4 and 7.4 GA through update 9… | ||||
| CVE-2025-43791US | medium6.1 | — | ||
Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.3.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and… | ||||
| CVE-2025-43792US | medium5.3 | — | ||
Remote staging in Liferay Portal 7.4.0 through 7.4.3.105, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA t… | ||||
| CVE-2025-43793US | high7.5 | — | ||
Liferay Portal 7.4.0 through 7.4.3.105, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35,… | ||||
02
references
External citations — patches, advisories, analysis.
- Liferay Known Vulnerabilities vom 2025-09-15external
- Liferay Known Vulnerabilities vom 2025-09-15external
- Liferay Known Vulnerabilities vom 2025-09-15external
- Liferay Known Vulnerabilities vom 2025-09-15external
- Liferay Known Vulnerabilities vom 2025-09-15external
- Liferay Known Vulnerabilities vom 2025-09-15external
- Liferay Known Vulnerabilities vom 2025-09-15external
- Liferay Known Vulnerabilities vom 2025-09-15external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan