7.5
High
CVE-2022-2232 A flaw was found in the Keycloak package
Description
A flaw was found in the Keycloak package. This flaw allows an attacker to utilize an LDAP injection to bypass the username lookup or potentially perform other malicious actions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Single Sign-On 7 | Versions not published |
Other CVEs of Red Hat Single Sign-On 7
The 295 CVEs of Red Hat Single Sign-On 7 →
CVE-2026-120984
Keycloak-services: keycloak-services: manage-clients to arbitrary code execution through inline javascript policy import
9.1
Critical
CVE-2026-97848
Keycloak-services: keycloak-services: protocol mapper with jsontype=json bypasses token sanitization
6.5
Medium
CVE-2026-97367
Keycloak-services: keycloak-services: dcr azp and sid claim substitution allows account rest session takeover
6.4
Medium
CVE-2026-96547
Keycloak-services: keycloak-services: dcr registration-time claim-path gap allows forging realm_access.roles
6.5
Medium