RH
Product
Red Hat build of Keycloak 24
10
CVEs
0
On KEV
7.7
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 6Low 1
Watch
Add Red Hat build of Keycloak 24 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-8698 | 7.7 | Sep 19 | Keycloak-saml-core: improper verification of saml responses leading to privilege escalation in keycloak Affected: All versions, or not specified |
| CVE-2024-4540 | 7.5 | Jun 3 | Keycloak: exposure of sensitive information in pushed authorization requests (par) kc_restart cookie Affected: All versions, or not specified |
| CVE-2024-7341 | 7.1 | Sep 9 | Wildfly-elytron: org.keycloak/keycloak-services: session fixation in elytron saml adapters Affected: All versions, or not specified |
Showing 3