NDIx

11 credited records · 1 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

Researchers

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
36Monitor	CVE-2026-59084No exploit	Apache Tomcat: EncryptInterceptor requirements not clearly documentedapache · tomcat · CWE-1059 Pre-auth	Critical9.1	—	0.5%	Jul 14, 2026
27Monitor	CVE-2025-43779No exploit	A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.112, and Liferay DXP 2024.Q1.1 through 2024.Qliferay · digital experience platform · CWE-79 Pre-auth XSS	Medium6.9	—	0.2%	Sep 23, 2025
18Monitor	CVE-2025-43776No exploit	A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 202liferay · digital experience platform · CWE-209 XSS Info leak	Medium4.6	—	0.2%	Sep 9, 2025
20Monitor	CVE-2025-43755No exploit	A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 t through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 20liferay · digital experience platform · CWE-79 XSS	Medium5.1	—	0.2%	Aug 21, 2025
19Monitor	CVE-2025-43757No exploit	A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Qliferay · digital experience platform · CWE-79 XSS	Medium4.8	—	0.2%	Aug 20, 2025
20Monitor	CVE-2025-43746No exploit	A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Qliferay · digital experience platform · CWE-79 XSS	Medium5.1	—	0.2%	Aug 20, 2025
20Monitor	CVE-2025-43744No exploit	A stored DOM-based Cross-Site Scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 202liferay · digital experience platform · CWE-79 XSS	Medium5.1	—	0.2%	Aug 19, 2025
27Monitor	CVE-2025-43745No exploit	A CSRF vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.7, 2025.Q1.0 through 2025.Q1.14, 2liferay · digital experience platform · CWE-352 Pre-auth CSRF	Medium6.9	—	0.2%	Aug 19, 2025
20Monitor	CVE-2025-43737No exploit	A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8 and 2025.Qliferay · digital experience platform · CWE-79 XSS	Medium5.1	—	0.3%	Aug 19, 2025
20Monitor	CVE-2025-43738No exploit	A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Qliferay · digital experience platform · CWE-79 XSS	Medium5.1	—	0.2%	Aug 19, 2025
18Monitor	CVE-2025-43740No exploit	A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.3.120 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8, liferay · digital experience platform · CWE-79 XSS	Medium4.6	—	0.2%	Aug 19, 2025

CVE-2026-59084
36Monitor
Apache Tomcat: EncryptInterceptor requirements not clearly documented
CriticalCVSS 9.1No exploitEPSS 1%
- Pre-auth
apache · tomcatJul 14, 2026
CVE-2025-43779
27Monitor
A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.112, and Liferay DXP 2024.Q1.1 through 2024.Q
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
- XSS
liferay · digital experience platformSep 23, 2025
CVE-2025-43776
18Monitor
A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 202
MediumCVSS 4.6No exploitEPSS 0%
- XSS
- Info leak
liferay · digital experience platformSep 9, 2025
CVE-2025-43755
20Monitor
A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 t through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 20
MediumCVSS 5.1No exploitEPSS 0%
- XSS
liferay · digital experience platformAug 21, 2025
CVE-2025-43757
19Monitor
A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q
MediumCVSS 4.8No exploitEPSS 0%
- XSS
liferay · digital experience platformAug 20, 2025
CVE-2025-43746
20Monitor
A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q
MediumCVSS 5.1No exploitEPSS 0%
- XSS
liferay · digital experience platformAug 20, 2025
CVE-2025-43744
20Monitor
A stored DOM-based Cross-Site Scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 202
MediumCVSS 5.1No exploitEPSS 0%
- XSS
liferay · digital experience platformAug 19, 2025
CVE-2025-43745
27Monitor
A CSRF vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.7, 2025.Q1.0 through 2025.Q1.14, 2
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
- CSRF
liferay · digital experience platformAug 19, 2025
CVE-2025-43737
20Monitor
A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8 and 2025.Q
MediumCVSS 5.1No exploitEPSS 0%
- XSS
liferay · digital experience platformAug 19, 2025
CVE-2025-43738
20Monitor
A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q
MediumCVSS 5.1No exploitEPSS 0%
- XSS
liferay · digital experience platformAug 19, 2025
CVE-2025-43740
18Monitor
A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.3.120 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8,
MediumCVSS 4.6No exploitEPSS 0%
- XSS
liferay · digital experience platformAug 19, 2025