Product by Liferay

Liferay Portal

319 known vulnerabilities in Liferay Portal (Liferay), 1 of them actively exploited (CISA KEV).

319

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Liferay Portal (Liferay)

Critical	CVE-2020-7961	Liferay Portal Deserialization of Untrusted Data Vulnerability In CISA KEV	9.8	20.03.2020
Critical	CVE-2019-16891	Liferay Portal: Deserialization of Untrusted Data	9.8	04.10.2019
Critical	CVE-2021-33990	Liferay Portal: security vulnerability	9.8	16.04.2023
Critical	CVE-2023-42627	Liferay DXP: Cross-site Scripting also in 3 other products	9.6	17.10.2023
High	CVE-2019-11444	Liferay Portal: security vulnerability	7.2	22.04.2019
High	CVE-2020-13445	Liferay Portal: Code Execution	8.8	10.06.2020
Critical	CVE-2023-42628	Liferay DXP: Cross-site Scripting also in 3 other products	9.0	17.10.2023
Critical	CVE-2023-42629	Liferay DXP: Cross-site Scripting also in 3 other products	9.0	17.10.2023
Medium	CVE-2025-4388	Liferay Portal: Cross-site Scripting also in 3 other products	6.1	06.05.2025
High	CVE-2010-5327	Liferay Portal: security vulnerability	8.8	13.01.2017
Medium	CVE-2020-7934	Liferay Portal: Cross-Site Scripting (XSS)	5.4	28.01.2020
High	CVE-2018-10795	Liferay Portal: security vulnerability	8.8	07.05.2018
High	CVE-2020-28885	Liferay Portal: OS Command Injection	7.2	28.01.2022
High	CVE-2020-15842	Liferay Portal: Deserialization of Untrusted Data also in 1 other product	8.1	20.07.2020
High	CVE-2020-28884	Liferay Portal: OS Command Injection	7.2	28.01.2022
Medium	CVE-2016-3670	Liferay Portal: Cross-Site Scripting (XSS)	6.1	13.06.2016
Medium	CVE-2020-15839	Liferay Portal: Denial of Service also in 1 other product	6.5	22.09.2020
High	CVE-2021-38266	Liferay Portal: security vulnerability also in 1 other product	7.5	02.03.2022
High	CVE-2020-24554	Liferay Portal: Denial of Service	7.5	01.09.2020
High	CVE-2020-15841	Liferay Portal: security vulnerability also in 1 other product	8.3	20.07.2020
Critical	CVE-2025-3594	Liferay Portal: Path Traversal also in 3 other products	9.8	16.06.2025
High	CVE-2021-33321	Liferay DXP: security vulnerability also in 1 other product	7.5	03.08.2021
High	CVE-2022-42124	Liferay Portal: security vulnerability also in 1 other product	7.5	15.11.2022
High	CVE-2021-29053	Liferay DXP: SQL Injection also in 1 other product	8.8	17.05.2021
Medium	CVE-2019-6588	Liferay Portal: Cross-Site Scripting (XSS)	4.7	03.06.2019

All vulnerabilities in search

All products by Liferay

Key figures

Vulnerabilities