Login Request a demo
KE
Product
Keycloak
by Redhat · last CVE Mar 5, 2026
98
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities98In the news0Timeline
Severity mix
Critical 5High 34Medium 53Low 6
Severity
All severities98Critical5High34Medium53Low6
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Keycloak to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-1245
9.8
1%
Jul 8
A privilege escalation flaw was found in the token exchange feature of keycloak
Affected: before 18.0.0
CVE-2019-14910
9.8
1%
Dec 5
A vulnerability was found in keycloak 7.x, when keycloak is configured with LDAP user federation and StartTLS is used instead of SSL/TLS from the LDAP server (ldaps), in this case…
Affected: 7.0.0; 7.0.1
CVE-2021-20195
9.6
1%
May 28
A flaw was found in keycloak in versions before 13.0.0
Affected: before 12.0.3
CVE-2022-3782
9.1
6%
Jan 13
keycloak: path traversal via double URL encoding
Affected: 20.0.2
CVE-2019-14837
9.1
2%
Jan 7
A flaw was found in keycloack before version 8.0.0
Affected: before 8.0.0
Showing 5