CVE-2011-1571

no score yetEPSS 8.5%

liferay liferay portal: no CVSS score yet. EPSS 8.5% chance of exploitation in the next 30 days. Fixed in com.liferay.portal:portal-service 6.0.6-ga.

Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors.

EPSS: 8.5% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
Published: 2011-05-07
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

liferay:liferay_portal

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-rpj9-pc39-h8j8	Maven	com.liferay.portal:portal-service	>=5.0.0 <6.0.6-ga	6.0.6-ga

References

http://issues.liferay.com/browse/LPS-14726
http://issues.liferay.com/secure/ReleaseNote.jspa?version=10656&styleName=Html&projectId=10952
http://openwall.com/lists/oss-security/2011/03/29/1
http://openwall.com/lists/oss-security/2011/04/08/5
http://openwall.com/lists/oss-security/2011/04/11/9

Check your stack JSON