Vulnerabilities of Red Hat Red Hat Build of Keycloak

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2025-14082	A flaw was found in Keycloak Admin REST (Representational State Transfer) API	2.7 Low	Dec 10, 2025
CVE-2024-3884	Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded	High	Dec 3, 2025
CVE-2025-8419	A vulnerability was found in Keycloak-services	5.3 Medium	Aug 6, 2025
CVE-2025-5416	A vulnerability has been identified in Keycloak that could lead to unauthorized information disclosure	2.7 Low	Jun 20, 2025
CVE-2025-3910	A flaw was found in Keycloak	5.4 Medium	Apr 29, 2025
CVE-2025-3501	A flaw was found in Keycloak	8.2 High	Apr 29, 2025
CVE-2025-2559	A flaw was found in Keycloak	4.9 Medium	Mar 25, 2025
CVE-2025-23368	Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli	8.1 High	Mar 4, 2025
CVE-2024-4028	A vulnerability was found in Keycloak	3.8 Low	Feb 18, 2025
CVE-2025-1391	A flaw was found in the Keycloak organization feature, which allows the incorrect assignment of an organization to a…	5.4 Medium	Feb 17, 2025
CVE-2025-23367	Org.wildfly.core:wildfly-server: wildfly improper rbac permission	6.5 Medium	Jan 30, 2025
CVE-2025-0604	A flaw was found in Keycloak	5.4 Medium	Jan 22, 2025
CVE-2024-11736	A vulnerability was found in Keycloak	4.9 Medium	Jan 14, 2025
CVE-2024-11734	A denial of service vulnerability was found in Keycloak that could allow an administrative user with the right to change…	6.5 Medium	Jan 14, 2025
CVE-2024-10973	A vulnerability was found in Keycloak	5.7 Medium	Dec 17, 2024
CVE-2024-12397	Io.quarkus.http/quarkus-http-core: quarkus http cookie smuggling	7.4 High	Dec 12, 2024
CVE-2024-12369	A vulnerability was found in OIDC-Client	4.2 Medium	Dec 9, 2024
CVE-2024-9666	A vulnerability was found in the Keycloak Server	4.7 Medium	Nov 25, 2024
CVE-2024-10234	A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system	6.1 Medium	Oct 22, 2024
CVE-2024-3656	A flaw was found in Keycloak	8.1 High	Oct 9, 2024
CVE-2024-8883	A misconfiguration flaw was found in Keycloak	6.1 Medium	Sep 19, 2024
CVE-2024-8698	A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class	7.7 High	Sep 19, 2024
CVE-2024-7341	A session fixation issue was discovered in the SAML adapters provided by Keycloak	7.1 High	Sep 9, 2024
CVE-2024-7318	A vulnerability was found in Keycloak	4.8 Medium	Sep 9, 2024
CVE-2024-7260	An open redirect vulnerability was found in Keycloak	6.1 Medium	Sep 9, 2024

Other Red Hat products