Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Api Bfla Api Bola Api Broken Auth Api Broken Object Prop Auth Api Dos Api Improper Inventory Management Api Misconfiguration Api Ssrf Arbitrary File Creation Arbitrary File Read Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial Of Service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File-upload File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilities LLM Ldap Injection Llm Excessive Agency Llm Insecure Output Handling Llm Prompt Injection Llm Prompt Leakage Llm Sensitive Information Disclosure Malware Missing Update Privilege Escalation RCE SSRF Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43765) CVE-2025-43765 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43769) CVE-2025-43769 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43770) CVE-2025-43770 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43771) CVE-2025-43771 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43775) CVE-2025-43775 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43776) CVE-2025-43776 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43778) CVE-2025-43778 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43779) CVE-2025-43779 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43781) CVE-2025-43781 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43783) CVE-2025-43783 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43785) CVE-2025-43785 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43787) CVE-2025-43787 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43791) CVE-2025-43791 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43794) CVE-2025-43794 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43800) CVE-2025-43800 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43802) CVE-2025-43802 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43804) CVE-2025-43804 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43807) CVE-2025-43807 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43811) CVE-2025-43811 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43812) CVE-2025-43812 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43815) CVE-2025-43815 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43817) CVE-2025-43817 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43818) CVE-2025-43818 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43820) CVE-2025-43820 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43821) CVE-2025-43821 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43822) CVE-2025-43822 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43823) CVE-2025-43823 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43824) CVE-2025-43824 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43826) CVE-2025-43826 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43829) CVE-2025-43829 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43830) CVE-2025-43830 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62237) CVE-2025-62237 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62238) CVE-2025-62238 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62239) CVE-2025-62239 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62240) CVE-2025-62240 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62246) CVE-2025-62246 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62248) CVE-2025-62248 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62249) CVE-2025-62249 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62255) CVE-2025-62255 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62263) CVE-2025-62263 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62264) CVE-2025-62264 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62265) CVE-2025-62265 CWE-707 CWE-707 Medium Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-62267) CVE-2025-62267 CWE-707 CWE-707 Medium Liferay Portal Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2025-62257) CVE-2025-62257 CWE-307 CWE-307 Medium Liferay Portal Incorrect Authorization Vulnerability (CVE-2024-25149) CVE-2024-25149 CWE-863 CWE-863 Medium Liferay Portal Incorrect Authorization Vulnerability (CVE-2024-25604) CVE-2024-25604 CWE-863 CWE-863 Medium Liferay Portal Incorrect Authorization Vulnerability (CVE-2025-43784) CVE-2025-43784 CWE-863 CWE-863 Medium Liferay Portal Incorrect Authorization Vulnerability (CVE-2025-43789) CVE-2025-43789 CWE-863 CWE-863 Medium Liferay Portal Incorrect Authorization Vulnerability (CVE-2025-43806) CVE-2025-43806 CWE-863 CWE-863 Medium Liferay Portal Incorrect Authorization Vulnerability (CVE-2025-62243) CVE-2025-62243 CWE-863 CWE-863 Medium Liferay Portal Incorrect Authorization Vulnerability (CVE-2025-62259) CVE-2025-62259 CWE-863 CWE-863 Medium Liferay Portal Incorrect Authorization Vulnerability (CVE-2025-62275) CVE-2025-62275 CWE-863 CWE-863 Medium Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2021-29052) CVE-2021-29052 CWE-276 CWE-276 Medium Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2021-33324) CVE-2021-33324 CWE-276 CWE-276 Medium Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2021-33327) CVE-2021-33327 CWE-276 CWE-276 Medium Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2021-33333) CVE-2021-33333 CWE-276 CWE-276 Medium Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2021-33334) CVE-2021-33334 CWE-276 CWE-276 Medium Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2021-38268) CVE-2021-38268 CWE-276 CWE-276 Medium Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2022-26595) CVE-2022-26595 CWE-276 CWE-276 Medium Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2022-41414) CVE-2022-41414 CWE-276 CWE-276 Medium Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2022-42127) CVE-2022-42127 CWE-276 CWE-276 Medium Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2022-42128) CVE-2022-42128 CWE-276 CWE-276 Medium Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2022-42130) CVE-2022-42130 CWE-276 CWE-276 Medium Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2024-25605) CVE-2024-25605 CWE-276 CWE-276 Medium Liferay Portal Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2025-43808) CVE-2025-43808 CWE-732 CWE-732 Medium Liferay Portal Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2025-62251) CVE-2025-62251 CWE-732 CWE-732 Medium Liferay Portal Inefficient Regular Expression Complexity Vulnerability (CVE-2025-43764) CVE-2025-43764 CWE-1333 CWE-1333 Medium Liferay Portal Insecure Default Initialization of Resource Vulnerability (CVE-2024-25610) CVE-2024-25610 CWE-1188 CWE-1188 Medium Liferay Portal Insecure Default Initialization of Resource Vulnerability (CVE-2024-26267) CVE-2024-26267 CWE-1188 CWE-1188 Medium Liferay Portal Insecure Default Initialization of Resource Vulnerability (CVE-2025-43797) CVE-2025-43797 CWE-1188 CWE-1188 Medium Liferay Portal Insertion of Sensitive Information into Log File Vulnerability (CVE-2025-62262) CVE-2025-62262 CWE-532 CWE-532 Medium Liferay Portal Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2025-43814) CVE-2025-43814 CWE-201 CWE-201 Medium Liferay Portal Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2025-43825) CVE-2025-43825 CWE-201 CWE-201 Medium Liferay Portal Insufficiently Protected Credentials Vulnerability (CVE-2021-29043) CVE-2021-29043 CWE-522 CWE-522 Medium Liferay Portal Insufficient Session Expiration Vulnerability (CVE-2025-43819) CVE-2025-43819 CWE-613 CWE-613 Medium 1...38394041...121 39 / 121
