DX
Product
DXP
243
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 31Medium 204Low 3
Watch
Add DXP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-43766 | 9.8 | Aug 23 | The Liferay Portal 7.4.0 through 7.3.3.131, and Liferay DXP 2024.Q4.0, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through… Affected: 7.4.13 through 7.4.13-u92; 2024.Q1.1 through 2024.Q1.12; 2024.Q2.0 through 2024.Q2.13; 2024.Q3.1 through 2024.Q3.13; 2024.Q4.0 |
| CVE-2025-3594 | 9.8 | Jun 16 | Path traversal vulnerability with the downloading and installation of Xuggler in Liferay Portal 7.0.0 through 7.4.3.4, and Liferay DXP 7.4 GA, 7.3 GA through update 34, and older… Affected: 6.2.0 through portal-173; 7.0.10 through de-102; 7.1.10 through dxp-28; 7.2.10 through dxp-20; 7.3.10 through 7.3.10-u34 |
| CVE-2022-42120 | 9.8 | Nov 15 | A SQL injection vulnerability in the Fragment module in Liferay Portal 7.3.3 through 7.4.3.16, and Liferay DXP 7.3 before update 4, and 7.4 before update 17 allows attackers to… Affected: 7.3; 7.4 |
| CVE-2022-42122 | 9.8 | Nov 15 | A SQL injection vulnerability in the Friendly Url module in Liferay Portal 7.3.7, and Liferay DXP 7.3 fix pack 2 through update 4 allows attackers to execute arbitrary SQL… Affected: 7.3 |
| CVE-2025-43773 | 9.1 | Aug 29 | Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through… Affected: 7.4.13 through 7.4.13-u92; 2024.Q1.1 through 2024.Q1.18; 2024.Q2.0 through 2024.Q2.13; 2024.Q3.0 through 2024.Q3.13; 2024.Q4.0 through 2024.Q4.7; 2025.Q1.0 through 2025.Q1.14; +1 more |
Showing 5