Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

CMS

Liferay Portal

Liferay Portal is the worlds leading enterprise open source portal framework offering integrated Web publishing and content management an enterprise service bus and service-oriented architecture and compatibility with all major IT infrastructure.

Official Site:

https://www.liferay.com/downloads-community

Severity Summary:

Critical: 6 High: 46 Medium: 231 Low: 2
Reference
Title
Severity
CVE-2025-62275
Liferay Portal Incorrect Authorization Vulnerability
Medium
CVE-2025-62276
Liferay Portal Use of Web Browser Cache Containing Sensitive Information Vulnerability
Medium
CVE-2025-43804
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2025-43812
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2025-43811
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2025-62242
Liferay Portal Authorization Bypass Through User-Controlled Key Vulnerability
Medium
CVE-2025-43802
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2025-43764
Liferay Portal Inefficient Regular Expression Complexity Vulnerability
Medium
CVE-2025-62238
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2025-43792
Liferay Portal External Control of System or Configuration Setting Vulnerability
Medium
CVE-2025-43821
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2025-43819
Liferay Portal Insufficient Session Expiration Vulnerability
Medium
CVE-2025-43809
Liferay Portal Cross-Site Request Forgery (CSRF) Vulnerability
Medium
CVE-2025-43808
Liferay Portal Incorrect Permission Assignment for Critical Resource Vulnerability
Medium
CVE-2025-43807
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2025-43805
Liferay Portal Missing Authorization Vulnerability
Medium
CVE-2025-43803
Liferay Portal Authorization Bypass Through User-Controlled Key Vulnerability
Medium
CVE-2025-43800
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2025-43799
Liferay Portal Use of Default Password Vulnerability
Medium
CVE-2025-43797
Liferay Portal Insecure Default Initialization of Resource Vulnerability
Medium
CVE-2025-43795
Liferay Portal URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Medium
CVE-2025-43794
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2025-43791
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2025-43823
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2025-43788
Liferay Portal Missing Authorization Vulnerability
Medium
CVE-2025-43787
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2025-43786
Liferay Portal Observable Discrepancy Vulnerability
Medium
CVE-2025-43785
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2025-43784
Liferay Portal Incorrect Authorization Vulnerability
Medium
CVE-2025-43783
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium