Liferay

Records340All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical29CVSS 9.0–10.0

CVSS high43CVSS 7.0–8.9

Exploited now

Liferay records in CISA KEV

TI-2020-06440 Liferay Portal Deserialization of Untrusted Data Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Liferay Portal 319 records CRITICAL Digital Experience Platform 264 records MEDIUM Dxp 39 records MEDIUM Liferay Enterprise Portal 9 records LOW Portal 2 records LOW Liferay 1 record MEDIUM Liferay Portal Enterprise 1 record LOW

Records

1 record in Liferay · all components

TI-2016-05585 CVE-2016-6517 · GHSA-3jfc-fh8w-4r9g

Directory traversal vulnerability in Liferay 5.1.0 allows remote attackers to have…

MEDIUM 47

Directory traversal vulnerability in Liferay 5.1.0 allows remote attackers to have unspecified impact via a %2E%2E (encoded dot dot) in the minifierBundleDir parameter to barebone.jsp.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.024 Published 2017-01-23 No fix listed CWE-22

Open these records in search →

Critical	29
High	43
Medium	254
Low	14
No CVSS	0