Vulnérabilités de Red Hat Red Hat Build of Keycloak

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2025-14082	A flaw was found in Keycloak Admin REST (Representational State Transfer) API	2.7 Faible	10 déc. 2025
CVE-2024-3884	Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded	Élevée	3 déc. 2025
CVE-2025-8419	A vulnerability was found in Keycloak-services	5.3 Moyenne	6 août 2025
CVE-2025-5416	A vulnerability has been identified in Keycloak that could lead to unauthorized information disclosure	2.7 Faible	20 juin 2025
CVE-2025-3910	A flaw was found in Keycloak	5.4 Moyenne	29 avr. 2025
CVE-2025-3501	A flaw was found in Keycloak	8.2 Élevée	29 avr. 2025
CVE-2025-2559	A flaw was found in Keycloak	4.9 Moyenne	25 mars 2025
CVE-2025-23368	Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli	8.1 Élevée	4 mars 2025
CVE-2024-4028	A vulnerability was found in Keycloak	3.8 Faible	18 févr. 2025
CVE-2025-1391	A flaw was found in the Keycloak organization feature, which allows the incorrect assignment of an organization to a…	5.4 Moyenne	17 févr. 2025
CVE-2025-23367	Org.wildfly.core:wildfly-server: wildfly improper rbac permission	6.5 Moyenne	30 janv. 2025
CVE-2025-0604	A flaw was found in Keycloak	5.4 Moyenne	22 janv. 2025
CVE-2024-11736	A vulnerability was found in Keycloak	4.9 Moyenne	14 janv. 2025
CVE-2024-11734	A denial of service vulnerability was found in Keycloak that could allow an administrative user with the right to change…	6.5 Moyenne	14 janv. 2025
CVE-2024-10973	A vulnerability was found in Keycloak	5.7 Moyenne	17 déc. 2024
CVE-2024-12397	Io.quarkus.http/quarkus-http-core: quarkus http cookie smuggling	7.4 Élevée	12 déc. 2024
CVE-2024-12369	A vulnerability was found in OIDC-Client	4.2 Moyenne	9 déc. 2024
CVE-2024-9666	A vulnerability was found in the Keycloak Server	4.7 Moyenne	25 nov. 2024
CVE-2024-10234	A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system	6.1 Moyenne	22 oct. 2024
CVE-2024-3656	A flaw was found in Keycloak	8.1 Élevée	9 oct. 2024
CVE-2024-8883	A misconfiguration flaw was found in Keycloak	6.1 Moyenne	19 sept. 2024
CVE-2024-8698	A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class	7.7 Élevée	19 sept. 2024
CVE-2024-7341	A session fixation issue was discovered in the SAML adapters provided by Keycloak	7.1 Élevée	9 sept. 2024
CVE-2024-7318	A vulnerability was found in Keycloak	4.8 Moyenne	9 sept. 2024
CVE-2024-7260	An open redirect vulnerability was found in Keycloak	6.1 Moyenne	9 sept. 2024

Autres produits Red Hat