All products

Red Hat support for Spring Boot/keycloak

Red Hat · Package
11 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Improper Restriction of Rendered UI Layers or Frames in KeycloakCVE-2020-1728 · GHSA-3GG7-9Q2X-79FC org.keycloak:keycloak-coreRed Hat OpenShift Application Runtimes/keycloak MavenRed Hat Medium No fix reported
Generation of Error Message Containing Sensitive Information in KeycloakCVE-2020-1717 · GHSA-RVFC-G8J5-9CCF org.keycloak:keycloak-parentRed Hat Fuse 7/keycloak MavenRed Hat Low No fix reported
Improper Input Validation in KeycloakCVE-2020-1714 · GHSA-M6MM-Q862-J366 org.keycloak:keycloak-commonorg.keycloak:keycloak-core MavenRed Hat High Fix reported
Keycloak Unauthenticated AccessCVE-2019-14832 · GHSA-8PRC-58J4-M55Q org.keycloak:keycloak-model-infinispanorg.keycloak:keycloak-model-jpa MavenRed Hat High Fix reported
Exposure of Sensitive Information in keycloakCVE-2020-1744 · GHSA-4GF2-XV97-63M2 org.keycloak:keycloak-coreRed Hat OpenShift Application Runtimes/keycloak MavenRed Hat Medium Fix reported
Improper Authentication for KeycloakCVE-2020-1718 · GHSA-J229-2H63-RVH9 org.keycloak:keycloak-parentRed Hat OpenShift Application Runtimes/keycloak MavenRed Hat Medium Fix reported
XSS in KeycloakCVE-2020-1697 · GHSA-8VF3-4W62-M3PQ org.keycloak:keycloak-coreRed Hat Mobile Application Platform 4/keycloak MavenRed Hat Medium Fix reported
OIDC Logout redirect in keycloakCVE-2020-10734 · GHSA-RVJG-GXWX-J5GF org.keycloak:keycloak-oidc-client-adapter-pomRed Hat Fuse 7/keycloak MavenRed Hat Low Fix reported
Improper Certificate Validation and Insufficient Verification of Data Authenticity in KeycloakCVE-2019-3875 · GHSA-38CG-GG9J-Q9J9 org.keycloak:keycloak-coreRed Hat Fuse 7/keycloak MavenRed Hat Medium No fix reported
Exposure of Sensitive Information to an Unauthorized Actor in KeycloakCVE-2019-3868 · GHSA-GC52-XJ6P-9PXP org.keycloak:keycloak-coreRed Hat Fuse 7/keycloak MavenRed Hat Medium Fix reported
Improper Input Validation and Cross-Site Request Forgery in KeycloakCVE-2019-10199 · GHSA-P5XP-6VPF-JWVH org.keycloak:keycloak-coreRed Hat Fuse 7/keycloak MavenRed Hat High Fix reported