Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

CMS

Liferay Portal

Liferay Portal is the worlds leading enterprise open source portal framework offering integrated Web publishing and content management an enterprise service bus and service-oriented architecture and compatibility with all major IT infrastructure.

Official Site:

https://www.liferay.com/downloads-community

Severity Summary:

Critical: 6 High: 46 Medium: 231 Low: 2
Reference
Title
Severity
CVE-2023-5190
Liferay Portal URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Medium
CVE-2024-26265
Liferay Portal Allocation of Resources Without Limits or Throttling Vulnerability
Medium
CVE-2024-25150
Liferay Portal Other Vulnerability
Medium
CVE-2024-25149
Liferay Portal Incorrect Authorization Vulnerability
Medium
CVE-2024-25610
Liferay Portal Insecure Default Initialization of Resource Vulnerability
Medium
CVE-2024-25608
Liferay Portal URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Medium
CVE-2024-8980
Liferay Portal Cross-Site Request Forgery (CSRF) Vulnerability
Medium
CVE-2024-25604
Liferay Portal Incorrect Authorization Vulnerability
Medium
CVE-2024-25609
Liferay Portal URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Medium
CVE-2024-25143
Liferay Portal Allocation of Resources Without Limits or Throttling Vulnerability
Medium
CVE-2024-25144
Liferay Portal Excessive Iteration Vulnerability
Medium
CVE-2024-25145
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2025-43789
Liferay Portal Incorrect Authorization Vulnerability
Medium
CVE-2011-1503
Liferay Portal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Low
CVE-2011-1570
Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Low