SS
Product
Single Sign ON
114
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 47Medium 51Low 6
Watch
Add Single Sign ON to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-2256 | 3.8 | Sep 1 | A Stored Cross-site scripting (XSS) vulnerability was found in keycloak as shipped in Red Hat Single Sign-On 7 Affected: 7.0 |
| CVE-2020-10734 | 3.3 | Feb 11 | A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF protection Affected: 7.0 |
| CVE-2026-4874 | 3.1 | Mar 26 | Org.keycloak.protocol.oidc.grants: org.keycloak.services.managers: keycloak: server-side request forgery via oidc token endpoint manipulation Affected: 7.0 |
| CVE-2026-15945 | 2.7 | Jul 16 | Keycloak-services: keycloak-services: group hierarchy search discloses hidden parent groups under fgap v2 Affected: 7.0 |
| CVE-2020-1717 | 2.7 | Feb 11 | A flaw was found in Keycloak 7.0.1 Affected: 7.0 |
| CVE-2020-14341 | 2.7 | Jan 12 | The "Test Connection" available in v7.x of the Red Hat Single Sign On application console can permit an authorized user to cause SMTP connections to be attempted to arbitrary… Affected: 7.0 through 7.4 |
Showing 6
