Vulnerabilities of Red Hat Red Hat Single Sign-On 7

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-15945	A flaw was found in the group search functionality of the Keycloak server's administrative API	4.3 Medium	Jul 16, 2026
CVE-2025-12799	A flaw was found in Jastow	6.5 Medium	Jul 7, 2026
CVE-2026-14781	A flaw exists in the org.keycloak.broker.oidc package where the OIDC broker incorrectly synchronizes the…	4.8 Medium	Jul 5, 2026
CVE-2026-14614	A flaw was found in the ClientResource component of Keycloak's admin services when Fine-Grained Admin Permissions (FGAP)…	5.4 Medium	Jul 3, 2026
CVE-2026-14613	A vulnerability was discovered in Keycloak's administrative interface that allows certain administrators to see…	4.3 Medium	Jul 3, 2026
CVE-2026-11800	A flaw was found in Keycloak	8.1 High	Jun 25, 2026
CVE-2026-9800	A flaw was found in Keycloak Policy Enforcer	8.1 High	Jun 25, 2026
CVE-2026-11998	A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE policies for resource URLs…	7.6 High	Jun 24, 2026
CVE-2026-54513	jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor	8.1 High	Jun 23, 2026
CVE-2026-50011	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-50010	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-48059	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-48043	Netty is a network application framework for development of protocol servers and clients	5.3 Medium	Jun 12, 2026
CVE-2026-48006	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-47691	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-46340	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-45674	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-45416	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-44893	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-50632	A further incomplete fix for a previous advisory CVE-2026-44417 (Untrusted JMS configuration can lead to RCE) for Apache…	Not rated	Jun 12, 2026
CVE-2026-49875	Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without the necessary…	Not rated	Jun 12, 2026
CVE-2026-44890	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 11, 2026
CVE-2026-44250	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 11, 2026
CVE-2026-44249	Netty is a network application framework for development of protocol servers and clients	8.1 High	Jun 11, 2026
CVE-2026-11577	A flaw was found in Keycloak	7.2 High	Jun 8, 2026

Other Red Hat products