CVE-2025-62262: Medium severity Liferay portal vulnerability

Published Oct 27, 2025
·
Updated

Information exposure through log file vulnerability in LDAP import feature in Liferay Portal 7.4.0 through 7.4.3.97, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows local users to view user email address in the log files.

Affected Software

46 affected componentsFixes available
Liferay portal>=7.4.0<=7.4.3.97, <=7.4.92, <=7.3.35
Liferay DXP>=2023.Q3.1<=2023.Q3.4
maven/com.liferay:com.liferay.portal.security.ldap.impl>=4.0.2<4.0.54
4.0.54
Liferay Digital Experience Platform=7.3-service_pack_3
Liferay Digital Experience Platform=7.3-update1
Liferay Digital Experience Platform=7.3-update10
Liferay Digital Experience Platform=7.3-update11
Liferay Digital Experience Platform=7.3-update12
Liferay Digital Experience Platform=7.3-update13
Liferay Digital Experience Platform=7.3-update14
Liferay Digital Experience Platform=7.3-update15
Liferay Digital Experience Platform=7.3-update16
Liferay Digital Experience Platform=7.3-update17
Liferay Digital Experience Platform=7.3-update18
Liferay Digital Experience Platform=7.3-update19
Liferay Digital Experience Platform=7.3-update2
Liferay Digital Experience Platform=7.3-update20
Liferay Digital Experience Platform=7.3-update21
Liferay Digital Experience Platform=7.3-update22
Liferay Digital Experience Platform=7.3-update23
Liferay Digital Experience Platform=7.3-update24
Liferay Digital Experience Platform=7.3-update25
Liferay Digital Experience Platform=7.3-update26
Liferay Digital Experience Platform=7.3-update27
Liferay Digital Experience Platform=7.3-update28
Liferay Digital Experience Platform=7.3-update29
Liferay Digital Experience Platform=7.3-update3
Liferay Digital Experience Platform=7.3-update30
Liferay Digital Experience Platform=7.3-update31
Liferay Digital Experience Platform=7.3-update32
Liferay Digital Experience Platform=7.3-update33
Liferay Digital Experience Platform=7.3-update34
Liferay Digital Experience Platform=7.3-update35
Liferay Digital Experience Platform=7.3-update36
Liferay Digital Experience Platform=7.3-update4
Liferay Digital Experience Platform=7.3-update5
Liferay Digital Experience Platform=7.3-update6
Liferay Digital Experience Platform=7.3-update7
Liferay Digital Experience Platform=7.3-update8
Liferay Digital Experience Platform=7.3-update9
Liferay Digital Experience Platform=7.4
Liferay Digital Experience Platform=2023.q3.1
Liferay Digital Experience Platform=2023.q3.2
Liferay Digital Experience Platform=2023.q3.3
Liferay Digital Experience Platform=2023.q3.4
Liferay Liferay Portal>=7.0.0<7.4.3.98

Event History

Oct 27, 2025
CVE Published
via MITRE·08:39 PM
Data Sourced
via MITRE·08:39 PM
DescriptionWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
Affected Software
Advisory Published
via GitHub·09:30 PM
Data Sourced
via GitHub·09:30 PM
DescriptionWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2025-62262?

CVE-2025-62262 is classified as a moderate severity vulnerability due to information exposure risks.

2

How do I fix CVE-2025-62262?

To fix CVE-2025-62262, update Liferay Portal to version 7.4.3.98 or later, or Liferay DXP to version 2023.Q3.5 or later.

3

What impact does CVE-2025-62262 have on my system?

CVE-2025-62262 may allow local users to access sensitive information stored in log files.

4

Which Liferay versions are impacted by CVE-2025-62262?

CVE-2025-62262 affects Liferay Portal versions 7.4.0 through 7.4.3.97, and older versions, as well as Liferay DXP 2023.Q3.1 through 2023.Q3.4.

5

Is CVE-2025-62262 still a concern for users of older Liferay versions?

Yes, users of older and unsupported versions of Liferay are still at risk from CVE-2025-62262.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203