CyberSec.Space Logo
Back to CVE Browser

CVE-2020-15842

HIGH
8.1
CVSS Severity Score
EPSS Score0.1280%
EPSS Percentile34.45th
PublishedJul 20, 2020
Last ModifiedMay 13, 2025

Vulnerability Description

Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix pack 17, and 7.2 before fix pack 5, allows man-in-the-middle attackers to execute arbitrary code via crafted serialized payloads, because of insecure deserialization.

Affected Platforms (CPE)

📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.0
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.2
📦
Liferay

Digital Experience Platform

= 7.2
📦
Liferay

Digital Experience Platform

= 7.2
📦
Liferay

Digital Experience Platform

= 7.2
📦
Liferay

Digital Experience Platform

= 7.2
📦
Liferay

Digital Experience Platform

= 7.2
📦
Liferay

Liferay Portal

< 7.3.0

References & Advisories

🔗 https://issues.liferay.com/browse/LPE-16963
🔗 https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/119317427
🔗 https://issues.liferay.com/browse/LPE-16963
🔗 https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/119317427

Related Vulnerabilities

CVE-2020-262467.7

Pimcore is an open source digital experience platform. In Pimcore before version 6.8.5 it is possible to modify & create website s...

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...

CVE-2026-121905.3

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the compo...

CVE-2026-121895.3

A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzm...