AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2011-1502

MEDIUM · CVSS 4 EPSS 1.83%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2011-05-07 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2011-1502
Severity
MEDIUM
CVSS
4
EPSS
1.83%
Apache

Original NVD Description

Liferay Portal Community Edition (CE) 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote authenticated users to read arbitrary files via an entity declaration in conjunction with an entity reference, related to an XML External Entity (aka XXE) issue.