Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Api Bfla Api Bola Api Broken Auth Api Broken Object Prop Auth Api Dos Api Improper Inventory Management Api Misconfiguration Api Ssrf Arbitrary File Creation Arbitrary File Read Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial Of Service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File-upload File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilities LLM Ldap Injection Llm Excessive Agency Llm Insecure Output Handling Llm Prompt Injection Llm Prompt Leakage Llm Sensitive Information Disclosure Malware Missing Update Privilege Escalation RCE SSRF Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Liferay DXP Missing Authorization Vulnerability (CVE-2025-62256) CVE-2025-62256 CWE-862 CWE-862 Medium Liferay DXP Missing Critical Step in Authentication Vulnerability (CVE-2025-43798) CVE-2025-43798 CWE-304 CWE-304 Medium Liferay DXP Observable Discrepancy Vulnerability (CVE-2024-25146) CVE-2024-25146 CWE-203 CWE-203 Medium Liferay DXP Observable Discrepancy Vulnerability (CVE-2024-26268) CVE-2024-26268 CWE-203 CWE-203 Medium Liferay DXP Observable Discrepancy Vulnerability (CVE-2025-43786) CVE-2025-43786 CWE-203 CWE-203 Medium Liferay DXP Observable Timing Discrepancy Vulnerability (CVE-2025-43754) CVE-2025-43754 CWE-208 CWE-208 Medium Liferay DXP Origin Validation Error Vulnerability (CVE-2022-25146) CVE-2022-25146 CWE-346 CWE-346 Medium Liferay DXP Origin Validation Error Vulnerability (CVE-2025-62250) CVE-2025-62250 CWE-346 CWE-346 Medium Liferay DXP Other Vulnerability (CVE-2023-33946) CVE-2023-33946 Medium Liferay DXP Other Vulnerability (CVE-2023-33947) CVE-2023-33947 Medium Liferay DXP Other Vulnerability (CVE-2024-25150) CVE-2024-25150 Medium Liferay DXP Other Vulnerability (CVE-2024-26270) CVE-2024-26270 Medium Liferay DXP Server-Side Request Forgery (SSRF) Vulnerability (CVE-2025-4655) CVE-2025-4655 CWE-918 CWE-918 Medium Liferay DXP Server-Side Request Forgery (SSRF) Vulnerability (CVE-2025-43747) CVE-2025-43747 CWE-918 CWE-918 Medium Liferay DXP Server-Side Request Forgery (SSRF) Vulnerability (CVE-2025-43763) CVE-2025-43763 CWE-918 CWE-918 Medium Liferay DXP Session Fixation Vulnerability (CVE-2023-47798) CVE-2023-47798 CWE-384 CWE-384 Medium Liferay DXP URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2022-28977) CVE-2022-28977 CWE-601 CWE-601 Medium Liferay DXP URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2023-5190) CVE-2023-5190 CWE-601 CWE-601 Medium Liferay DXP URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2023-44308) CVE-2023-44308 CWE-601 CWE-601 Medium Liferay DXP URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2024-25608) CVE-2024-25608 CWE-601 CWE-601 Medium Liferay DXP URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2024-25609) CVE-2024-25609 CWE-601 CWE-601 Medium Liferay DXP URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2025-43767) CVE-2025-43767 CWE-601 CWE-601 Medium Liferay DXP URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2025-43795) CVE-2025-43795 CWE-601 CWE-601 Medium Liferay DXP URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2025-62253) CVE-2025-62253 CWE-601 CWE-601 Medium Liferay DXP URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2025-62266) CVE-2025-62266 CWE-601 CWE-601 Medium Liferay DXP Use of Default Password Vulnerability (CVE-2025-43799) CVE-2025-43799 Medium Liferay DXP Use of Web Browser Cache Containing Sensitive Information Vulnerability (CVE-2025-62276) CVE-2025-62276 CWE-525 CWE-525 Medium Liferay Portal Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2021-33320) CVE-2021-33320 CWE-770 CWE-770 Medium Liferay Portal Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-25143) CVE-2024-25143 CWE-770 CWE-770 Medium Liferay Portal Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-26265) CVE-2024-26265 CWE-770 CWE-770 Medium Liferay Portal Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2025-43762) CVE-2025-43762 CWE-770 CWE-770 Medium Liferay Portal Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2022-42129) CVE-2022-42129 CWE-639 CWE-639 Medium Liferay Portal Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-43782) CVE-2025-43782 CWE-639 CWE-639 Medium Liferay Portal Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-43803) CVE-2025-43803 CWE-639 CWE-639 Medium Liferay Portal Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-43810) CVE-2025-43810 CWE-639 CWE-639 Medium Liferay Portal Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-43827) CVE-2025-43827 CWE-639 CWE-639 Medium Liferay Portal Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-62242) CVE-2025-62242 CWE-639 CWE-639 Medium Liferay Portal Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-62244) CVE-2025-62244 CWE-639 CWE-639 Medium Liferay Portal Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-62252) CVE-2025-62252 CWE-639 CWE-639 Medium Liferay Portal Cleartext Storage of Sensitive Information Vulnerability (CVE-2021-33325) CVE-2021-33325 CWE-312 CWE-312 Medium Liferay Portal Cleartext Storage of Sensitive Information Vulnerability (CVE-2025-62261) CVE-2025-62261 CWE-312 CWE-312 Medium Liferay Portal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-8980) CVE-2024-8980 CWE-352 CWE-352 Medium Liferay Portal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-43809) CVE-2025-43809 CWE-352 CWE-352 Medium Liferay Portal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-62245) CVE-2025-62245 CWE-352 CWE-352 Medium Liferay Portal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-62258) CVE-2025-62258 CWE-352 CWE-352 Medium Liferay Portal CVE-2011-1571 Vulnerability (CVE-2011-1571) CVE-2011-1571 Medium Liferay Portal CVE-2020-13444 Vulnerability (CVE-2020-13444) CVE-2020-13444 Medium Liferay Portal CVE-2020-15840 Vulnerability (CVE-2020-15840) CVE-2020-15840 Medium Liferay Portal CVE-2021-33330 Vulnerability (CVE-2021-33330) CVE-2021-33330 Medium Liferay Portal CVE-2022-42126 Vulnerability (CVE-2022-42126) CVE-2022-42126 Medium Liferay Portal CVE-2022-45320 Vulnerability (CVE-2022-45320) CVE-2022-45320 Medium Liferay Portal Excessive Iteration Vulnerability (CVE-2024-25144) CVE-2024-25144 CWE-834 CWE-834 Medium Liferay Portal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-1502) CVE-2011-1502 CWE-200 CWE-200 Medium Liferay Portal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2022-42132) CVE-2022-42132 CWE-200 CWE-200 Medium Liferay Portal External Control of System or Configuration Setting Vulnerability (CVE-2025-43792) CVE-2025-43792 CWE-15 CWE-15 Medium Liferay Portal Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2021-29040) CVE-2021-29040 CWE-209 CWE-209 Medium Liferay Portal Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2025-43777) CVE-2025-43777 CWE-209 CWE-209 Medium Liferay Portal Improper Certificate Validation Vulnerability (CVE-2022-42131) CVE-2022-42131 CWE-295 CWE-295 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-3742) CVE-2009-3742 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-2963) CVE-2014-2963 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-10404) CVE-2016-10404 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-12645) CVE-2017-12645 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-12646) CVE-2017-12646 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-12647) CVE-2017-12647 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-12648) CVE-2017-12648 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-12649) CVE-2017-12649 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-17868) CVE-2017-17868 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1000425) CVE-2017-1000425 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-6588) CVE-2019-6588 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-16147) CVE-2019-16147 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-7934) CVE-2020-7934 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-25476) CVE-2020-25476 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29039) CVE-2021-29039 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29044) CVE-2021-29044 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29045) CVE-2021-29045 CWE-707 CWE-707 Medium 1...36373839...121 37 / 121
