Myfaces (Apache) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 104 known versions, newest CVE from 2021-02-19. Vendor: Apache.

CVEs of Myfaces

• CVE-2021-26296 - CVSS 7.5 (high), 2021-02-19: In the default configuration, Apache MyFaces Core versions 2.2.0 to 2.2.13, 2.3.0 to 2.3.7, 2.3-next-M1 to 2.3-next-M4, and 3.0.0-RC1 use cryptographically…
• CVE-2011-4343 - CVSS 7.5 (high), 2017-08-08: Information disclosure vulnerability in Apache MyFaces Core 2.0.1 through 2.0.10 and 2.1.0 through 2.1.4 allows remote attackers to inject EL expressions via…
• CVE-2011-4367 - CVSS 5 (medium), 2014-06-19: Multiple directory traversal vulnerabilities in MyFaces JavaServer Faces (JSF) in Apache MyFaces Core 2.0.x before 2.0.12 and 2.1.x before 2.1.6 allow remote…
• CVE-2010-2057 - CVSS 5 (medium), 2010-10-20: shared/util/StateUtils.java in Apache MyFaces 1.1.x before 1.1.8, 1.2.x before 1.2.9, and 2.0.x before 2.0.1 uses an encrypted View State without a Message…
• CVE-2010-2086 - CVSS 4 (medium), 2010-05-27: Apache MyFaces 1.1.7 and 1.2.8, as used in IBM WebSphere Application Server and other applications, does not properly handle an unencrypted view state, which…