← Back

Primefaces

primefaces

Vendor: Primetek • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-10544
1Primetek
1Primefaces
Jun 17, 2026
Mar 13, 2020
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
An XSS issue was discovered in tooltip/tooltip.js in PrimeTek PrimeFaces 7.0.11. In a web application using PrimeFaces, an attacker can provide JavaScript code in an input field whose data is later used as a tooltip titl...Show more
An XSS issue was discovered in tooltip/tooltip.js in PrimeTek PrimeFaces 7.0.11. In a web application using PrimeFaces, an attacker can provide JavaScript code in an input field whose data is later used as a tooltip title without any input validation.Show less
CVE-2017-1000486
1Primetek
1Primefaces
Nov 5, 2025
Jan 3, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution