CVE-2020-7961 CISA KEV · Actively exploited
Liferay Portal Deserialization of Untrusted Data Vulnerability
CVSS score
—
EPSS probability
%99.9
Risk score
—
Published
5 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Liferay Portal - Java Unmarshalling via JSONWS RCE (Metasploit)
Makefile Go / Python
Nuclei: Liferay Portal Unauthenticated < 7.2.1 CE GA2 - Remote Code Execution
Makefile Go / Python
Similar Vulnerabilities
7.5
CVE-2021-38266Vulnerability in Liferay Portal
Patch status unknownEPSS %2
8.8
CVE-2021-29053SQL injection in Liferay Dxp
Patch status unknownEPSS %1
7.5
CVE-2022-42124Regular expression denial of service in Liferay Portal
Patch status unknownEPSS %1
7.5
CVE-2022-28981Path traversal in Liferay Portal
Patch status unknownEPSS %1
8.8
CVE-2022-42121SQL injection in Liferay Portal
Patch status unknownEPSS %1
7.5
CVE-2021-29047Improper authentication in Liferay Dxp
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2020-7961"