Single Sign ON vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

SS

Product

Single Sign ON

by Redhat · last CVE Aug 5, 2026

114

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities114 In the news0 Timeline

Severity mix

Critical 10High 47Medium 51Low 6

Severity

All severities114 Critical10 High47 Medium51 Low6

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Single Sign ON to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2019-14838	4.9	1%	Oct 14	A flaw was found in wildfly-core before 7.2.5.GA Affected: 7.3.5
CVE-2018-10912	4.9	1%	Jul 23	keycloak before version 4.0.0.final is vulnerable to a infinite loop in session replacement Affected: 7.2
CVE-2020-10687	4.8	1%	Sep 23	A flaw was discovered in all versions of Undertow before Undertow 2.2.0.Final, where HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to… Affected: All versions, or not specified
CVE-2019-3875	4.8	0%	Jun 12	A vulnerability was found in keycloak before 6.0.2 Affected: 7.3
CVE-2020-1724	4.3	1%	May 11	A flaw was found in Keycloak in versions before 9.0.2 Affected: 7.0
CVE-2019-14885	4.3	1%	Jan 23	A flaw was found in the JBoss EAP Vault system in all versions before 7.2.6.GA Affected: 7.0
CVE-2019-14820	4.3	1%	Jan 8	It was found that keycloak before version 8.0.0 exposes internal adapter endpoints in org.keycloak.constants.AdapterConstants, which can be invoked via a specially-crafted URL Affected: 7.3
CVE-2020-27826	4.2	1%	May 28	A flaw was found in Keycloak before version 12.0.0 where it is possible to update the user's metadata attributes using Account REST API Affected: 7.4; 7.4.4
CVE-2022-2256	3.8	1%	Sep 1	A Stored Cross-site scripting (XSS) vulnerability was found in keycloak as shipped in Red Hat Single Sign-On 7 Affected: 7.0
CVE-2020-10734	3.3	0%	Feb 11	A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF protection Affected: 7.0
CVE-2026-4874	3.1	0%	Mar 26	Org.keycloak.protocol.oidc.grants: org.keycloak.services.managers: keycloak: server-side request forgery via oidc token endpoint manipulation Affected: 7.0
CVE-2026-15945	2.7	0%	Jul 16	Keycloak-services: keycloak-services: group hierarchy search discloses hidden parent groups under fgap v2 Affected: 7.0
CVE-2020-1717	2.7	1%	Feb 11	A flaw was found in Keycloak 7.0.1 Affected: 7.0
CVE-2020-14341	2.7	1%	Jan 12	The "Test Connection" available in v7.x of the Red Hat Single Sign On application console can permit an authorized user to cause SMTP connections to be attempted to arbitrary… Affected: 7.0 through 7.4