Sploitus

45 exploited vulnerabilities in Liferay Portal

Vulnerabilities with publicly known exploits

Vendors
Liferay, Elastic, Cksource
With known exploits
45
Affected Liferay Liferay Portal versions
< 7.2.1, 6.2.5, 7.3.7, 7.4.3.16, 6.0.6, 6.1.0, 6.1.1, 6.1.2, 6.2.0, 6.2.1, 6.2.2, 6.2.3, 6.2.4, 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.1.0, 7.1.1, 7.1.2, 7.1.3, 7.2.0, 7.4.3.92, 7.4.3.88, 7.4.3.4, 7.1, 7.2, 7.3, 7.4.3.36, 7.4.3.19, 7.4.2, 7.4.3.15, 7.4.3.37, 7.4.0, 7.3.3, 7.4.3.25
Affected Liferay Dxp versions
= 7.3, 7.4
Affected Liferay Digital Experience Platform versions
= 7.3, 7.4, 7.0, 7.1, 7.2

Vulnerabilities with exploits

Highest CVSS first — 9 of these already have exploit code on Sploitus

CVE-2020-7961 18 exploits
CVSS 9.8 CRITICAL 2020-03-20FIX AVAILABLE
CVE-2021-33990 3 exploits
CVSS 9.8 CRITICAL 2023-04-16
CVE-2022-42122
CVSS 9.8 CRITICAL 2022-11-15FIX AVAILABLE
CVE-2022-42120
CVSS 9.8 CRITICAL 2022-11-15FIX AVAILABLE
CVE-2019-16891 1 exploit
CVSS 9.8 CRITICAL 2019-10-04
CVE-2023-42627
CVSS 9.6 CRITICAL 2023-10-17FIX AVAILABLE
CVE-2023-42629
CVSS 9.0 CRITICAL 2023-10-17FIX AVAILABLE
CVE-2023-42628
CVSS 9.0 CRITICAL 2023-10-17FIX AVAILABLE
CVE-2019-11444 1 exploit
CVSS 9.0 HIGH 2019-04-22FIX AVAILABLE
CVE-2022-42121
CVSS 8.8 HIGH 2022-11-15FIX AVAILABLE
CVE-2020-13445 1 exploit
CVSS 8.8 HIGH 2020-06-10FIX AVAILABLE
CVE-2022-42125
CVSS 7.5 HIGH 2022-11-15
CVE-2022-42123
CVSS 7.5 HIGH 2022-11-15FIX AVAILABLE
CVE-2022-28981
CVSS 7.5 HIGH 2022-09-22
CVE-2022-38512
CVSS 6.5 MEDIUM 2022-09-22FIX AVAILABLE
CVE-2022-45320
CVSS 6.3 MEDIUM 2024-02-19FIX AVAILABLE
CVE-2022-42118
CVSS 6.1 MEDIUM 2022-11-15FIX AVAILABLE
CVE-2022-42117
CVSS 6.1 MEDIUM 2022-10-18FIX AVAILABLE
CVE-2022-42116
CVSS 6.1 MEDIUM 2022-10-18FIX AVAILABLE
CVE-2022-42113
CVSS 6.1 MEDIUM 2022-10-18FIX AVAILABLE
CVE-2022-42110
CVSS 6.1 MEDIUM 2022-11-14FIX AVAILABLE
CVE-2022-28982
CVSS 6.1 MEDIUM 2022-09-21FIX AVAILABLE
CVE-2022-28979
CVSS 6.1 MEDIUM 2022-09-21FIX AVAILABLE
CVE-2022-28977
CVSS 6.1 MEDIUM 2022-09-22FIX AVAILABLE
CVE-2022-26597
CVSS 6.1 MEDIUM 2022-04-25FIX AVAILABLE
CVE-2022-26596
CVSS 6.1 MEDIUM 2022-04-25FIX AVAILABLE
CVE-2022-26594
CVSS 6.1 MEDIUM 2022-04-15FIX AVAILABLE
CVE-2017-17868
CVSS 6.1 MEDIUM 2017-12-23FIX AVAILABLE
CVE-2022-42119
CVSS 5.4 MEDIUM 2022-11-15FIX AVAILABLE
CVE-2022-42115
CVSS 5.4 MEDIUM 2022-10-18FIX AVAILABLE
CVE-2022-42114
CVSS 5.4 MEDIUM 2022-10-18FIX AVAILABLE
CVE-2022-42112
CVSS 5.4 MEDIUM 2022-10-18FIX AVAILABLE
CVE-2022-42111
CVSS 5.4 MEDIUM 2022-11-15FIX AVAILABLE
CVE-2022-28978
CVSS 5.4 MEDIUM 2022-09-21FIX AVAILABLE
CVE-2022-26593
CVSS 5.4 MEDIUM 2022-04-19FIX AVAILABLE
CVE-2020-7934 5 exploits
CVSS 5.4 MEDIUM 2020-01-28FIX AVAILABLE
CVE-2022-42127
CVSS 5.3 MEDIUM 2022-11-15
CVE-2022-41414
CVSS 5.3 MEDIUM 2022-10-07FIX AVAILABLE
CVE-2022-42131
CVSS 4.8 MEDIUM 2022-11-15FIX AVAILABLE
CVE-2019-6588 4 exploits
CVSS 4.7 MEDIUM 2019-06-03FIX AVAILABLE
CVE-2022-42126
CVSS 4.3 MEDIUM 2022-11-15FIX AVAILABLE
CVE-2022-39975
CVSS 4.3 MEDIUM 2022-09-21FIX AVAILABLE
CVE-2022-26595
CVSS 4.3 MEDIUM 2022-04-19
CVE-2008-0178 1 exploit
CVSS 4.3 MEDIUM 2008-02-04
CVE-2007-6055 1 exploit
CVSS 4.3 MEDIUM 2007-11-20FIX AVAILABLE