CVE-2017-1000486
Critical · 9.8 CISA KEVCVSS
9.8
EPSS
94.1%
Published
Jan 3, 2018
CISA due date
Jul 10, 2022
The record
Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | org.primefaces:primefaces | 5.0 | 6.0 |
| maven | org.primefaces/primefaces | 4.0 | No fix |
| maven | org.primefaces/primefaces | 5.0 | 5.2.21 |
| maven | org.primefaces/primefaces | 5.0 | 6.0 |
| maven | org.primefaces/primefaces | 5.3 | 5.3.8 |
Related vulnerabilities
- CVE-2026-112026 A security vulnerability has been detected in light0011 cms… CWE-326
- CVE-2026-77405 RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. CWE-326
- CVE-2026-86670 A flaw has been found in aircheng-org iWebShop-5 up to 5.15. CWE-326
- CVE-2026-17520 The Newsletters WordPress plugin before 4.17 does not generate its API key using a… CWE-326
- CVE-2026-47842 Applications using AesBytesEncryptor with the two-argument constructor or when passing a… CWE-326
- CVE-2026-79084 Inadequate encryption strength in Notifications in Google Chrome on on Windows prior to… CWE-326
- CVE-2026-74889 openssl_encrypt versions before 1.4.0 use HKDF with no salt and static info parameter in… CWE-326
- CVE-2026-65777 Inadequate encryption strength in Windows Active Directory allows an authorized attacker… CWE-326