CVE-2025-43739

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.6, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.16 and 7.4 GA through update 92 allow any authenticated user to modify the content of emails sent through the calendar portlet, allowing an attacker to send phishing emails to any other user in the same organization.

We have discovered 59 live websites that are affected by CVE-2025-43739.

Run a Free Instant Scan



Affected Software

Product  Liferay
Category Content Management System
Vulnerable Domains59 live websites (2.05% of Liferay install base)
Vulnerable Versions
  • from 7.4 through 7.4.3.132
Vulnerable Versions Count16 versions ( 27% of all versions)


Common Weakness Enumeration

CWE-203 Observable Discrepancy



Details

  • Published - Aug 19, 2025
  • Updated - Aug 19, 2025

Website Distribution by Country

Number of websites using CVE-2025-43739
United States16 websites


Italy10 websites
Spain9 websites
Germany7 websites
GB4 websites
Brazil3 websites
Portugal3 websites
Belgium1 websites
Bahrain1 websites
Switzerland1 websites

Website Distribution by TLD

Number of websites using CVE-2025-43739
.com17 websites
.es7 websites
.it6 websites
.org5 websites
.co.uk4 websites
.de4 websites
.be1 websites
.cz1 websites
.pl1 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2025-43739

Top websites that are affected by CVE-2025-43739. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*****************.***.it Italy**,***
*****.es Spain**,***
****.***.it Italy**,***
******.****.***.it Italy***,***
************.*******.**************.it Italy***,***
*****.****.***.it Italy***,***
**************.de Germany***,***
***********.*****.pl Poland***,***
**.**.***.br Brazil***,***
*****.pt Portugal*,***,***
See full domain list

FAQ

CVE-2025-43739 is Observable Discrepancy in Liferay
A total of 59 websites have been identified as vulnerable to CVE-2025-43739, based on global website indexing conducted by WebTechSurvey.
The Liferay is affected by the CVE-2025-43739 vulnerability.
Liferay versions up to and including 7.4.3.132 are vulnerable to CVE-2025-43739.