Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.primefaces:primefaces

2 known vulnerabilities (1 critical), with the versions each affects and the releases that fix them.

Latest release
16.0.1 (Oct 16, 2026): no advisory affects it
Newest unaffected release
16.0.1 (Oct 16, 2026), the latest release
Advisories
2 · 1 critical
Dependents
91
Releases
120 since 4.0 (Oct 2, 2013)
Registry
Maven Central
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 2

  • An XSS issue was discovered in tooltip/tooltip.js in PrimeTek PrimeFaces 7.0.11.

    Affected: fixed in 8.0.

    Fixed in 8.0 (released Mar 5, 2020, 8 days before disclosure).

    The latest release, 16.0.1, is not affected.

  • CVE-2017-1000486Critical 9.8 · KEV

    Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

    Affected: from 5.0, fixed in 6.0.

    Fixed in 6.0 (released Jun 7, 2016, 575 days before disclosure).

    The latest release, 16.0.1, is not affected.