Vulnérabilités de n/a Keycloak
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2023-4918 | A flaw was found in the Keycloak package, more specifically org.keycloak.userprofile | 8.8 Élevée | 12 sept. 2023 |
| CVE-2023-1664 | A flaw was found in Keycloak | 6.5 Moyenne | 26 mai 2023 |
| CVE-2022-1274 | A flaw was found in Keycloak in the execute-actions-email endpoint | Non notée | 29 mars 2023 |
| CVE-2022-2237 | A flaw was found in the Keycloak Node.js Adapter | 6.1 Moyenne | 27 mars 2023 |
| CVE-2022-2256 | A Stored Cross-site scripting (XSS) vulnerability was found in keycloak as shipped in Red Hat Single Sign-On 7 | Non notée | 1 sept. 2022 |
| CVE-2022-0225 | A flaw was found in Keycloak | Non notée | 26 août 2022 |
| CVE-2021-3632 | A flaw was found in Keycloak | Non notée | 26 août 2022 |
| CVE-2021-3754 | A flaw was found in keycloak where an attacker is able to register himself with the username same as the email ID of any… | Non notée | 26 août 2022 |
| CVE-2021-3856 | ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the… | Non notée | 26 août 2022 |
| CVE-2020-35509 | A flaw was found in keycloak affecting versions 11.0.3 and 12.0.0 | 5.4 Moyenne | 23 août 2022 |
| CVE-2021-3827 | A flaw was found in keycloak, where the default ECP binding flow allows other authentication flows to be bypassed | Non notée | 23 août 2022 |
| CVE-2021-3513 | A flaw was found in keycloak where a brute force attack is possible even when the permanent lockout feature is enabled | Non notée | 22 août 2022 |
| CVE-2022-2668 | An issue was discovered in Keycloak that allows arbitrary Javascript to be uploaded for the SAML protocol mapper even if… | Non notée | 5 août 2022 |
| CVE-2022-1245 | A privilege escalation flaw was found in the token exchange feature of keycloak | Non notée | 7 juil. 2022 |
| CVE-2021-3461 | A flaw was found in keycloak where keycloak may fail to logout user session if the logout request comes from external… | Non notée | 1 avr. 2022 |
| CVE-2021-4133 | A flaw was found in Keycloak in versions from 12.0.0 and before 15.1.1 which allows an attacker with any existing user… | Non notée | 25 janv. 2022 |
| CVE-2021-3424 | A flaw was found in keycloak as shipped in Red Hat Single Sign-On 7.4 where IDN homograph attacks are possible | Non notée | 1 juin 2021 |
| CVE-2021-20195 | A flaw was found in keycloak in versions before 13.0.0 | Non notée | 28 mai 2021 |
| CVE-2020-27826 | A flaw was found in Keycloak before version 12.0.0 where it is possible to update the user's metadata attributes using… | Non notée | 28 mai 2021 |
| CVE-2021-20202 | A flaw was found in keycloak | Non notée | 12 mai 2021 |
| CVE-2021-20222 | A flaw was found in keycloak | Non notée | 23 mars 2021 |
| CVE-2021-20262 | A flaw was found in Keycloak 12.0.0 where re-authentication does not occur while updating the password | Non notée | 9 mars 2021 |
| CVE-2020-27838 | A flaw was found in keycloak in versions prior to 13.0.0 | Non notée | 8 mars 2021 |
| CVE-2020-14359 | A vulnerability was found in all versions of Keycloak Gatekeeper, where on using lower case HTTP headers (via cURL) an… | Non notée | 23 févr. 2021 |
| CVE-2020-10734 | A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF protection | Non notée | 11 févr. 2021 |
Autres produits n/a
n/a 144660
Android 2441
kernel 279
Open5GS 125
Intel(R) Processors 119
BIG-IP 110
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions 106
HPE Intelligent Management Center (IMC) PLAT 105
Moodle 89
Aruba ClearPass Policy Manager 83
GPAC 80
postgresql 79