PatchTheCVEprimefaces vulnerabilities and fixes
Recent CVEs affecting primefaces, with upgrade or downgrade steps. 1 tracked.
primefaces has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-03-13. Highest priority: CVE-2020-10544 (score 36/100).
- CVE-2020-10544 MEDIUM 6.1 DOWNGRADE An XSS issue was discovered in tooltip/tooltip.js in PrimeTek PrimeFaces 7.0.11
FAQ
How do I fix primefaces vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is primefaces being exploited right now?
None of the tracked primefaces CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which primefaces CVE should I patch first?
CVE-2020-10544 currently ranks highest (36/100): An XSS issue was discovered in tooltip/tooltip.js in PrimeTek PrimeFaces 7.0.11.