Approved changes feed: RSS · Atom

cpe:2.3:a:liferay:liferay_portal:7.1.2:ga3:*:*:community:*:*:*

part: a version: 7.1.2 update: ga3

VendorLiferay (5231553d-d54f-5cd9-bf56-0bf2ac7f0033)
ProductLiferay Portal (e3d198b8-0678-58dd-bf73-106b66a02cfe)
Edition*
Language*
Software editioncommunity
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/liferay/portal purl2cpe 2026-06-01 10:15:56.340390
pkg:github/liferay/liferay-portal purl2cpe 2026-06-01 10:15:56.340391
pkg:liferay/liferay-portal purl2cpe 2026-06-01 10:15:56.340392
pkg:sourceforge/lportal purl2cpe 2026-06-01 10:15:56.340394

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-16891 vulnerable 2026-06-08 05:13:09.536888 Details available
Liferay Portal CE 6.2.5 allows remote command execution because of deserialization of a JSON payload.
Published: 2019-10-04T00:00:00.000Z
Updated: 2024-08-05T01:24:48.622Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.