RH
Product
Red Hat build of Keycloak 22
5
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 2Low 0
Watch
Add Red Hat build of Keycloak 22 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-4540 | 7.5 | Jun 3 | Keycloak: exposure of sensitive information in pushed authorization requests (par) kc_restart cookie Affected: All versions, or not specified |
| CVE-2024-1249 | 7.4 | Apr 17 | Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos Affected: All versions, or not specified |
| CVE-2024-7341 | 7.1 | Sep 9 | Wildfly-elytron: org.keycloak/keycloak-services: session fixation in elytron saml adapters Affected: All versions, or not specified |
| CVE-2024-4629 | 6.5 | Sep 3 | Keycloak: potential bypass of brute force protection Affected: All versions, or not specified |
| CVE-2023-6717 | 6.0 | Apr 25 | Keycloak: xss via assertion consumer service url in saml post-binding flow Affected: All versions, or not specified |
Showing 5