Records2All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Primetek records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsPriority CRITICAL 100KEV
Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.94104 · Published 2018-01-03 · Fixed in 6.0 CWE-326
Priority LOW 29
An XSS issue was discovered in tooltip/tooltip.js in PrimeTek PrimeFaces 7.0.11.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00832 · Published 2020-03-13 · Fixed in 8.0 CWE-79
Open these records in search →