https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T00:22:47.468819+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 certfr-2025-avi-0954 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une atteinte… 2026-10-06T00:22:47.536304+00:00 certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/euvd-2026-9398 EUVD-2026-9398 2026-10-06T00:22:47.536344+00:00 EUVD-2026-9398 https://cve.radiocsirt.org/vuln/fkie_cve-2023-42496 fkie_cve-2023-42496 2026-10-06T00:22:47.536360+00:00

Reflected cross-site scripting (XSS) vulnerability on the add assignees to a role page in Liferay Portal 7.3.3 through 7.4.3.97, and Liferay DXP 2023.Q3 before patch 6, 7.4 GA through update 92, and 7.3 before update 34 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_roles_admin_web_portlet_RolesAdminPortlet_tabs2 parameter.

 https://cve.radiocsirt.org/vuln/ghsa-54pv-r62j-9qqc GHSA-54pv-r62j-9qqc — Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting 2026-10-06T00:22:47.536391+00:00

Affected: Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom

Reflected cross-site scripting (XSS) vulnerability on the add assignees to a role page in Liferay Portal 7.3.3 through 7.4.3.97, and Liferay DXP 2023.Q3 before patch 6, 7.4 GA through update 92, and 7.3 before update 34 allows remote attackers to inject arbitrary web script or HTML via the `_com_liferay_roles_admin_web_portlet_RolesAdminPortlet_tabs2` parameter.

 https://cve.radiocsirt.org/vuln/gsd-2023-42496 gsd-2023-42496 2026-10-06T00:22:47.536425+00:00 gsd-2023-42496 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0440 WID-SEC-W-2024-0440 — Liferay Portal und Liferay DXP: Mehrere Schwachstellen 2026-10-06T00:22:47.536438+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff zu starten, vertrauliche Informationen offenzulegen oder Dateien zu manipulieren.