Security
فارسی
All products

Red Hat Single Sign-On 7/rh-sso7-keycloak

Red Hat · Package
32 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Keycloak Denial of Service vulnerabilityCVE-2023-6841 · GHSA-W97F-W3HQ-36G2 org.keycloak:keycloak-coreRed Hat Single Sign-On 7/rh-sso7-keycloak MavenRed Hat High Fix reported
Keycloak vulnerable to impersonation via logout token exchangeCVE-2023-0657 · GHSA-7FPJ-9HR8-28VH org.keycloak:keycloak-servicesRed Hat Single Sign-On 7/rh-sso7-keycloak MavenRed Hat Low Fix reported
Keycloak Cross-site Scripting (XSS) via assertion consumer service URL in SAML POST-binding flowCVE-2023-6717 · GHSA-8RMM-GM28-PJ8Q org.keycloak:keycloak-servicesMigration Toolkit for Applications 6/mta/mta-ui-rhel9 MavenRed Hat Medium Fix reported
Keycloak vulnerable to session hijacking via re-authenticationCVE-2023-6787 · GHSA-C9H6-V78W-52WJ org.keycloak:keycloak-servicesRed Hat Single Sign-On 7/rh-sso7-keycloak MavenRed Hat Medium Fix reported
angular vulnerable to super-linear runtime due to backtrackingCVE-2024-21490 · GHSA-4W4V-5HC9-XRR2 org.webjars.bower:angularorg.webjars.npm:angular MavennpmRed Hat High No fix reported
Keycloak allows cross-site scripting (XSS)CVE-2024-4028 · GHSA-Q4XQ-445G-G6CH org.keycloak:keycloak-coreRed Hat Single Sign-On 7/rh-sso7-keycloak MavenRed Hat Low No fix reported
Denial of service in XStreamCVE-2017-7957 · GHSA-7HWC-46RM-65JH com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat High Fix reported
Keycloak Denial of Service via account lockoutCVE-2024-1722 · GHSA-CQ42-VHV7-XR7P org.keycloak:keycloak-servicesRed Hat Build of Keycloak/keycloak-core MavenRed Hat Low Fix reported
Keycloak vulnerable to LDAP Injection on UsernameForm LoginCVE-2022-2232 · GHSA-8HC5-RMGF-QX6P org.keycloak:keycloak-ldap-federationorg.keycloak:keycloak-services MavenRed Hat Low Fix reported
Moderate severity vulnerability that affects org.keycloak:keycloak-coreCVE-2017-12161 · GHSA-959Q-32G8-VVP7 org.keycloak:keycloak-coreRed Hat Mobile Application Platform 4/keycloak MavenRed Hat Medium Fix reported
Keycloak code execution via UMA policy abuseCVE-2019-10169 · GHSA-9C24-43P5-FV82 org.keycloak:keycloak-authz-clientRed Hat Single Sign-On 7/rh-sso7-keycloak MavenRed Hat High Fix reported
Keycloak discloses information without authenticationCVE-2020-27838 · GHSA-PCV5-M2WH-66J3 org.keycloak:keycloak-coreRed Hat Single Sign-On 7/rh-sso7-keycloak MavenRed Hat Medium Fix reported
Keycloak leaks sensitive information in logged exceptionsCVE-2020-1698 · GHSA-QGMM-F2QW-R95F org.keycloak:keycloak-coreRed Hat Fuse 7/keycloak-core MavenRed Hat Medium Fix reported
Generation of Error Message Containing Sensitive Information in KeycloakCVE-2020-1717 · GHSA-RVFC-G8J5-9CCF org.keycloak:keycloak-parentRed Hat Fuse 7/keycloak MavenRed Hat Low No fix reported
Keycloak Missing authentication for critical functionCVE-2021-20262 · GHSA-XF46-8VVP-4HXX org.keycloak:keycloak-coreRed Hat Single Sign-On 7/rh-sso7-keycloak MavenRed Hat Medium No fix reported
Improper Input Validation in KeycloakCVE-2020-1714 · GHSA-M6MM-Q862-J366 org.keycloak:keycloak-commonorg.keycloak:keycloak-core MavenRed Hat High Fix reported
Incorrect Permission Assignment for Critical Resource and Permissive List of Allowed Inputs in KeycloakCVE-2020-1694 · GHSA-72J4-94RX-CR6W org.keycloak:keycloak-parentRed Hat Mobile Application Platform 4/keycloak MavenRed Hat Medium Fix reported
XSS in KeycloakCVE-2020-1697 · GHSA-8VF3-4W62-M3PQ org.keycloak:keycloak-coreRed Hat Mobile Application Platform 4/keycloak MavenRed Hat Medium Fix reported
Cross-site Scripting in KeycloakCVE-2020-10748 · GHSA-HGPG-593R-HHVP org.keycloak:keycloak-parentRed Hat Single Sign-On 7/rh-sso7-keycloak MavenRed Hat Medium Fix reported
OIDC Logout redirect in keycloakCVE-2020-10734 · GHSA-RVJG-GXWX-J5GF org.keycloak:keycloak-oidc-client-adapter-pomRed Hat Fuse 7/keycloak MavenRed Hat Low Fix reported