L
Vendor security profile1 actively exploited CVEs
liferay
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs66
Critical2
CISA KEV1
Public exploit4
Patch rate%27
Avg. CVSS6.0
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
0
CVE KEV
CVE severity distribution
66toplam CVE
Critical2 (3%)
High8 (12%)
Medium55 (83%)
Uncertain1 (2%)
Patch and exploitation view
%27
Verified patch
%2
CISA KEV
%6
Public exploit
18Patch available
0Partial
1Workaround
0Vendor: no patch
47Unknown
Latest vulnerabilities
5.4
CVE-2025-62265Cross-site scripting in Liferay Portal
Patch status unknownEPSS %0
6.1
CVE-2025-62266Open redirect in Liferay Portal
Patch status unknownEPSS %0
5.3
CVE-2025-62257Vulnerability in Liferay Portal
Patch status unknownEPSS %0
4.3
6.1
CVE-2025-43779Cross-site scripting in Liferay Portal
Patch status unknownEPSS %0
6.1
CVE-2025-43783Cross-site scripting in Liferay Portal
Patch status unknownEPSS %0
6.5
CVE-2025-43784Incorrect authorization in Liferay Portal
Patch status unknownEPSS %0
6.1
CVE-2025-43785Cross-site scripting in Liferay Portal
Patch status unknownEPSS %0
5.9
CVE-2022-42132Information exposure in Liferay Portal
Patch status unknownEPSS %1
4.8
CVE-2022-42131Improper certificate validation in Liferay Portal
Patch status unknownEPSS %0