https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T23:40:56.300866+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 certfr-2025-avi-0954 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une atteinte… 2026-10-06T23:40:56.364791+00:00 certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/euvd-2026-207324 EUVD-2026-207324 2026-10-06T23:40:56.364830+00:00 EUVD-2026-207324 https://cve.radiocsirt.org/vuln/fkie_cve-2023-37940 fkie_cve-2023-37940 2026-10-06T23:40:56.364845+00:00

Cross-site scripting (XSS) vulnerability in the edit Service Access Policy page in Liferay Portal 7.0.0 through 7.4.3.87, and Liferay DXP 7.4 GA through update 87, 7.3 GA through update 29, and older unsupported versions allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a service access policy's `Service Class` text field.

 https://cve.radiocsirt.org/vuln/ghsa-px38-239g-x5mg GHSA-px38-239g-x5mg — Liferay Portal and Liferay DXP have Cross-site Scripting vulnerability in edit Service Access Policy page 2026-10-06T23:40:56.364875+00:00

Affected: Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom

Cross-site scripting (XSS) vulnerability in the edit Service Access Policy page in Liferay Portal 7.0.0 through 7.4.3.87, and Liferay DXP 7.4 GA through update 87, 7.3 GA through update 29, and older unsupported versions allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a service access policy's `Service Class` text field.

 https://cve.radiocsirt.org/vuln/gsd-2023-37940 gsd-2023-37940 2026-10-06T23:40:56.364902+00:00 gsd-2023-37940 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3721 WID-SEC-W-2024-3721 — Liferay Liferay DXP: Mehrere Schwachstellen ermöglichen Cross-Site Scripting 2026-10-06T23:40:56.364914+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Liferay Liferay DXP und Liferay Liferay Portal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.