Vendor
Liferay
No CISA KEV deadline is open. CISA last added a Liferay CVE on 3 Nov 2021.
Tracked since 9 Nov · latest article 9 Nov · RSS · API
0Open KEV deadlines
None open
0Added to KEV · 90 days
of 1 in the full CISA catalogue · all time
0High exploit odds · current
EPSS top 5%, not in KEV
1Articles · 7 days
usual rate
Exploited, by due date1
Liferay CVEs in CISA KEV with their federal deadlines. None is open.
| CVE | Product | Added | Federal deadline | Articles |
|---|---|---|---|---|
| In CISA KEVCVE-2020-7961 | Liferay Portal | 3 Nov | Passed 3 May | 1 |
Patch cadence and exploit odds
How often CISA adds Liferay CVEs, how many have a fix, and where their exploit odds sit.
Added to CISA KEV per quarter
Show as tableHide table
| Quarter | Added |
|---|---|
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
No additions in the last eight quarters.
Fix listed
0 of 1 CVE in coverage
1 CVE has no vendor fix recorded yet.
EPSS percentile of each CVE
One dot per CVE; a red diamond marks those in CISA KEV.
Show as tableHide table
| CVE | EPSS percentile |
|---|---|
| CVE-2020-7961 | 100 |
Coverage1 article · all time
The latest article naming Liferay, in the shared story grammar.
Developinglatest 36 minutes ago1 article1 outlet
1 article from 1 outlet since 9 Nov. Still developing; the latest report was 36 minutes ago.
- Mon 9 Nov, 16:31 UTC. Infosecurity, first report. Jailbroken AI agent attacked European telecom for two weeks.
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Coverage over time
Show all 1 articles as a listHide the list
- Mon 9 NovDay 01
- Jailbroken AI agent attacked European telecom for two weeks16:31 · Infosecurity · First report
All CVEs in coverage1
Exploited first, then by EPSS
- CVE-2020-7961Exploited
Liferay Portal Deserialization of Untrusted Data Vulnerability
9.8Critical99.9% EPSS · 1 article