CVE-2025-43743

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allows any authenticated remote user to view other calendars by allowing them to enumerate the names of other users, given an attacker the possibility to send phishing to these users.

We have discovered 59 live websites that are affected by CVE-2025-43743.

Run a Free Instant Scan



Affected Software

Product  Liferay
Category Content Management System
Vulnerable Domains59 live websites (2.05% of Liferay install base)
Vulnerable Versions
  • from 7.4 through 7.4.3.132
Vulnerable Versions Count16 versions ( 27% of all versions)


Common Weakness Enumeration

CWE-203 Observable Discrepancy



Details

  • Published - Aug 19, 2025
  • Updated - Aug 19, 2025

Website Distribution by Country

Number of websites using CVE-2025-43743
United States16 websites


Italy10 websites
Spain9 websites
Germany7 websites
GB4 websites
Brazil3 websites
Portugal3 websites
Belgium1 websites
Bahrain1 websites
Switzerland1 websites

Website Distribution by TLD

Number of websites using CVE-2025-43743
.com17 websites
.es7 websites
.it6 websites
.org5 websites
.co.uk4 websites
.de4 websites
.be1 websites
.cz1 websites
.pl1 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2025-43743

Top websites that are affected by CVE-2025-43743. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*****************.***.it Italy**,***
*****.es Spain**,***
****.***.it Italy**,***
******.****.***.it Italy***,***
************.*******.**************.it Italy***,***
*****.****.***.it Italy***,***
**************.de Germany***,***
***********.*****.pl Poland***,***
**.**.***.br Brazil***,***
*****.pt Portugal*,***,***
See full domain list

FAQ

CVE-2025-43743 is Observable Discrepancy in Liferay
A total of 59 websites have been identified as vulnerable to CVE-2025-43743, based on global website indexing conducted by WebTechSurvey.
The Liferay is affected by the CVE-2025-43743 vulnerability.
Liferay versions up to and including 7.4.3.132 are vulnerable to CVE-2025-43743.