Advisories for Maven/Com.sun.faces/Jsf-Impl package

This package does not perform appropriate encoding when a <h:outputText> tag or EL expression is used after a scriptor style block, which allows remote attackers to conduct cross-site scripting (XSS) attacks via application-specific vectors.

This package allows remote attackers to affect confidentiality via unknown vectors related to Java Server Faces or Web Container.