SS
Product
Single Sign ON
by Redhat · last CVE Aug 5, 2026
114
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 47Medium 51Low 6
Watch

Add Single Sign ON to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-2256
3.8
1%
Sep 1
A Stored Cross-site scripting (XSS) vulnerability was found in keycloak as shipped in Red Hat Single Sign-On 7
Affected: 7.0
CVE-2020-10734
3.3
0%
Feb 11
A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF protection
Affected: 7.0
CVE-2026-4874
3.1
0%
Mar 26
Org.keycloak.protocol.oidc.grants: org.keycloak.services.managers: keycloak: server-side request forgery via oidc token endpoint manipulation
Affected: 7.0
CVE-2026-15945
2.7
0%
Jul 16
Keycloak-services: keycloak-services: group hierarchy search discloses hidden parent groups under fgap v2
Affected: 7.0
CVE-2020-1717
2.7
1%
Feb 11
A flaw was found in Keycloak 7.0.1
Affected: 7.0
CVE-2020-14341
2.7
1%
Jan 12
The "Test Connection" available in v7.x of the Red Hat Single Sign On application console can permit an authorized user to cause SMTP connections to be attempted to arbitrary…
Affected: 7.0 through 7.4
Showing 6