Liferay
Number 85 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Combines these spellings from source records: Liferay, liferay
Total vulnerabilities
213
Critical
25
High
17
Known Exploited
1
Exploit available
3
Network, no login needed
42.3%
Of 213 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 0 | 0 | 0 | 0 | 0 | 0 |
| 2025 | 144 | 0 | 10 | 125 | 9 | 0 |
| 2024 | 41 | 15 | 6 | 20 | 0 | 0 |
| 2023 | 27 | 9 | 1 | 15 | 2 | 0 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2020 | 1 | 1 | 0 | 0 | 0 | 0 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| Portal | 197 | 32 |
| DXP | 13 | 7 |
| Liferay Portal | 1 | 1 |
| dxp | 1 | 1 |
| portal | 1 | 1 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Cross-Site Scripting | 98 | 20 |
| Cross-Site Request Forgery | 11 | 8 |
| Insecure Direct Object Reference | 10 | 1 |
| Incorrect Authorization | 9 | 1 |
| URL Redirection to Untrusted Site ('Open Redirect') | 9 | 0 |
| Insertion of Sensitive Information Into Sent Data | 7 | 0 |
| Missing Authorization | 7 | 1 |
| Allocation of Resources Without Limits or Throttling | 5 | 0 |
| Denial of Service | 5 | 5 |
| Insecure Default Initialization of Resource | 4 | 1 |
Known to be attacked
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2020-7961 | Liferay Portal Deserialization of Untrusted Data Vulnerability | Critical | 99.9% |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2025-62275 | Liferay Portal: Incorrect Authorization | Medium | 0.3% | |
| CVE-2025-62276 | Liferay Portal vulnerability | Medium | 0.1% | |
| CVE-2025-62267 | Liferay Portal: Cross-Site Scripting | Medium | 0.2% | |
| CVE-2025-62264 | Liferay Portal: Cross-Site Scripting | Medium | 0.2% | |
| CVE-2025-62266 | Liferay Portal vulnerability | Medium | 0.2% | |
| CVE-2025-62265 | Liferay Portal: Cross-Site Scripting | Medium | 0.2% | |
| CVE-2025-62257 | Liferay Portal vulnerability | Medium | 0.4% | |
| CVE-2025-62263 | Liferay Portal: Cross-Site Scripting | Medium | 0.2% | |
| CVE-2025-62262 | Liferay Portal: Information Disclosure | Medium | 0.1% | |
| CVE-2025-62261 | Liferay Portal vulnerability | Medium | 0.3% |