Aller au contenu

Vulnérabilités de Red Hat Red Hat Build of Keycloak

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-18203 A flaw was found in the group policy evaluation logic of Keycloak, an identity and access management solution 6.5 Moyenne 31 juil. 2026
CVE-2026-18214 Keycloak allows users to log in using Google accounts and can be configured to only allow users from specific Google… 6.8 Moyenne 31 juil. 2026
CVE-2026-18211 A flaw was found in the secure-client-uris client policy executor within Keycloak core services 4.2 Moyenne 31 juil. 2026
CVE-2026-18208 A flaw was found in the OIDC token introspection endpoint of the keycloak-services component 6.5 Moyenne 31 juil. 2026
CVE-2026-16105 A flaw was found in the RoleContainerResource component of Keycloak 4.9 Moyenne 31 juil. 2026
CVE-2026-18215 Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a specific organization… 6.8 Moyenne 31 juil. 2026
CVE-2026-18217 A flaw was found in the SAML protocol implementation of Keycloak, an open-source identity and access management solution 3.4 Faible 31 juil. 2026
CVE-2026-18218 A flaw was found in the TokenManager component of the Keycloak identity management service 4.2 Moyenne 31 juil. 2026
CVE-2026-18201 Keycloak provides a way to manage identity providers and organizations through its administrative API 5.5 Moyenne 29 juil. 2026
CVE-2026-18207 A flaw was found in the client policy enforcement mechanism of Keycloak 6.5 Moyenne 29 juil. 2026
CVE-2026-17059 A flaw was found in the role-users endpoint of the keycloak-services library, which is the core component of the… 6.5 Moyenne 24 juil. 2026
CVE-2026-17048 A flaw was found in the Keycloak Admin REST API, which is used to manage security realms and clients 5.5 Moyenne 24 juil. 2026
CVE-2026-16104 A flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core… 4.3 Moyenne 17 juil. 2026
CVE-2026-16103 A flaw was found in the keycloak-services component of Keycloak 4.3 Moyenne 17 juil. 2026
CVE-2026-16106 A flaw was found in the admin REST API of Keycloak, a solution for identity and access management 4.9 Moyenne 17 juil. 2026
CVE-2026-16108 A flaw was found in the default-groups REST endpoint and realm representation of Keycloak 4.3 Moyenne 17 juil. 2026
CVE-2026-16093 Keycloak provides a mechanism called Client Policies to enforce security requirements on clients, such as requiring them… 5.4 Moyenne 17 juil. 2026
CVE-2026-16089 A flaw was found in the keycloak-services component of Red Hat Build of Keycloak 5.4 Moyenne 17 juil. 2026
CVE-2026-16072 A flaw was found in the organization management component of Keycloak 4.9 Moyenne 17 juil. 2026
CVE-2026-15943 A flaw was found in the Keycloak keycloak-services component, which handles the management of identity providers 5.5 Moyenne 17 juil. 2026
CVE-2026-15945 A flaw was found in the group search functionality of the Keycloak server's administrative API 4.3 Moyenne 16 juil. 2026
CVE-2026-14781 A flaw exists in the org.keycloak.broker.oidc package where the OIDC broker incorrectly synchronizes the… 4.8 Moyenne 5 juil. 2026
CVE-2026-14615 A flaw was found in the Fine-Grained Admin Permissions (FGAP) v2 implementation within Keycloak's administrative… 4.3 Moyenne 3 juil. 2026
CVE-2026-14614 A flaw was found in the ClientResource component of Keycloak's admin services when Fine-Grained Admin Permissions (FGAP)… 5.4 Moyenne 3 juil. 2026
CVE-2026-14613 A vulnerability was discovered in Keycloak's administrative interface that allows certain administrators to see… 4.3 Moyenne 3 juil. 2026

Autres produits Red Hat