Lucene search
Veracode Vulnerability DatabaseVERACODE:5635HistoryJan 03, 2018 - 11:59 p.m.
Remote Code Execution (RCE)
2018-01-0323:59:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
18
EPSS
0.97
Percentile
99.8%
primefaces is vulnerable to remote code execution (RCE). It uses weak encryption on the PrimeSecret and PrimeOracle which allows expression language injection and remote code execution.
Related
cvelist
cvelist
CVE-2017-1000486
2018-01-03 20:00:00
checkpoint_advisories
checkpoint_advisories
Primetek Primefaces Weak Encryption Remote Code Execution (CVE-2017-1000486)
2018-10-28 00:00:00
cisa_kev
cisa_kev
Primetek Primefaces Remote Code Execution Vulnerability
2022-01-10 00:00:00
prion
prion
Remote code execution
2018-01-03 20:29:00
exploitpack
exploitpack
Primefaces 5.x - Remote Code Execution (Metasploit)
2018-01-18 00:00:00
hackerone
hackerone
U.S. Dept Of Defense: RCE (Remote code execution) in one of DoD's websites
2020-05-15 10:01:24
U.S. Dept Of Defense: RCE in ██████ subdomain via CVE-2017-1000486
2020-12-28 06:18:10
packetstorm
packetstorm
Primefaces 5.x Remote Code Execution
2018-01-18 00:00:00
attackerkb
attackerkb
CVE-2017-1000486
2018-01-03 00:00:00
nessus
nessus
PrimeTek PrimeFaces Remote Code Execution (CVE-2017-1000486)
2022-12-07 00:00:00
osv
osv
Inadequate Encryption Strength
2021-06-03 19:22:22
nvd
nvd
CVE-2017-1000486
2018-01-03 20:29:00
github
github
Inadequate Encryption Strength
2021-06-03 19:22:22
cve
cve
CVE-2017-1000486
2018-01-03 20:29:00
exploitdb
exploitdb
Primefaces 5.x - Remote Code Execution (Metasploit)
2018-01-18 00:00:00
nuclei
nuclei
Primetek Primefaces 5.x - Remote Code Execution
2021-05-27 08:17:31
threatpost
threatpost
‘Elephant Beetle’ Lurks for Months in Networks
2022-01-05 22:18:28
thn
thn
Researchers Uncover Hacker Group Behind Organized Financial-Theft Operation
2022-01-05 13:40:00
cisa
cisa
CISA Adds 15 Known Exploited Vulnerabilities to Catalog
2022-01-10 00:00:00