CVE-2025-43751

User enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10 and 7.4 GA through update 92 allows remote attackers to determine if an account exist in the application via the create account page.

We have discovered 59 live websites that are affected by CVE-2025-43751.

Run a Free Instant Scan



Affected Software

Product  Liferay
Category Content Management System
Vulnerable Domains59 live websites (2.05% of Liferay install base)
Vulnerable Versions
  • from 7.4 through 7.4.3.132
Vulnerable Versions Count16 versions ( 27% of all versions)


Common Weakness Enumeration

CWE-203 Observable Discrepancy



Details

  • Published - Aug 22, 2025
  • Updated - Aug 22, 2025

Website Distribution by Country

Number of websites using CVE-2025-43751
United States16 websites


Italy10 websites
Spain9 websites
Germany7 websites
GB4 websites
Brazil3 websites
Portugal3 websites
Belgium1 websites
Bahrain1 websites
Switzerland1 websites

Website Distribution by TLD

Number of websites using CVE-2025-43751
.com17 websites
.es7 websites
.it6 websites
.org5 websites
.co.uk4 websites
.de4 websites
.be1 websites
.cz1 websites
.pl1 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2025-43751

Top websites that are affected by CVE-2025-43751. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*****************.***.it Italy**,***
*****.es Spain**,***
****.***.it Italy**,***
******.****.***.it Italy***,***
************.*******.**************.it Italy***,***
*****.****.***.it Italy***,***
**************.de Germany***,***
***********.*****.pl Poland***,***
**.**.***.br Brazil***,***
*****.pt Portugal*,***,***
See full domain list

FAQ

CVE-2025-43751 is Observable Discrepancy in Liferay
A total of 59 websites have been identified as vulnerable to CVE-2025-43751, based on global website indexing conducted by WebTechSurvey.
The Liferay is affected by the CVE-2025-43751 vulnerability.
Liferay versions up to and including 7.4.3.132 are vulnerable to CVE-2025-43751.