Liferay Liferay Portal vulnerabilities
319 published vulnerabilities in Liferay Liferay Portal, 1 of them exploited in the wild. The most were published in 2025 (139), and 139 so far in 2025.
Liferay Liferay Portal vulnerabilities by year
2009
2010
2011
2014
2016
2017
2018
2019
2020
2021
2022
2023
2024
2025
Most exploited Liferay Liferay Portal vulnerabilities
- CVE-2020-7961 Liferay Portal Deserialization of Untrusted Data
- CVE-2021-33990 File upload in n/a
- CVE-2022-42120 Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment Module
- CVE-2022-42122 Liferay Portal and Liferay DXP Vulnerable to SQL Injection via Friendly URL Module
- CVE-2019-16891 Liferay Portal Allows RCE via Deserialization of a JSON Payload
- CVE-2024-8980 Liferay Portal and Liferay DXP Vulnerable to CSRF in the Script Console
- CVE-2023-42496 Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting
- CVE-2023-42498 Liferay Portal Language Override edit screen and Liferay DXP vulnerable to reflected Cross-site Scripting
- CVE-2024-25147 Liferay Portal and Liferay DXP vulnerable to Cross-site Scripting
- CVE-2024-26269 Liferay Portal Frontend JS module's portlet.js and Liferay DXP vulnerable to Cross-site Scripting
- CVE-2024-25145 Liferay Portal stored cross-site scripting (XSS) vulnerability
- CVE-2023-47797 Liferay Portal XSS with `p_l_back_url_title` on edit content page
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.