Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

redhat.com

redhat.com Keycloak vulnerabilities

4 published CVEs name redhat.com Keycloak among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2023-0264

    A flaw was found in Keycloaks OpenID Connect user authentication, which may incorrectly authenticate requests. An authenticated attacker who could obtain…

    redhat.com · Keycloak

    Medium5.0
  • CVE-2023-0105

    A flaw was found in Keycloak. This flaw allows impersonation and lockout due to the email trust not being handled correctly in Keycloak. An attacker can shadow…

    redhat.com · Keycloak

    Medium6.5
  • CVE-2023-0091

    A flaw was found in Keycloak, where it did not properly check client tokens for possible revocation in its client credential flow. This flaw allows an attacker…

    redhat.com · Keycloak

    Low3.8
  • CVE-2022-3782

    keycloak: path traversal via double URL encoding. A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. An attacker…

    redhat.com · Keycloak

    Critical9.1
All 4 in the list