Aller au contenu

Vulnérabilités de Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-16089 A flaw was found in the keycloak-services component of Red Hat Build of Keycloak 5.4 Moyenne 17 juil. 2026
CVE-2026-16072 A flaw was found in the organization management component of Keycloak 4.9 Moyenne 17 juil. 2026
CVE-2026-15943 A flaw was found in the Keycloak keycloak-services component, which handles the management of identity providers 5.5 Moyenne 17 juil. 2026
CVE-2026-15945 A flaw was found in the group search functionality of the Keycloak server's administrative API 4.3 Moyenne 16 juil. 2026
CVE-2026-1609 A flaw was found in Keycloak 8.1 Élevée 16 juil. 2026
CVE-2025-12799 A flaw was found in Jastow 6.5 Moyenne 7 juil. 2026
CVE-2026-14781 A flaw exists in the org.keycloak.broker.oidc package where the OIDC broker incorrectly synchronizes the… 4.8 Moyenne 5 juil. 2026
CVE-2026-14614 A flaw was found in the ClientResource component of Keycloak's admin services when Fine-Grained Admin Permissions (FGAP)… 5.4 Moyenne 3 juil. 2026
CVE-2026-14613 A vulnerability was discovered in Keycloak's administrative interface that allows certain administrators to see… 4.3 Moyenne 3 juil. 2026
CVE-2026-14209 A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass… 4.3 Moyenne 30 juin 2026
CVE-2026-57915 It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized… Non notée 26 juin 2026
CVE-2026-11800 A flaw was found in Keycloak 8.1 Élevée 25 juin 2026
CVE-2026-9800 A flaw was found in Keycloak Policy Enforcer 8.1 Élevée 25 juin 2026
CVE-2026-11998 A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE policies for resource URLs… 7.6 Élevée 24 juin 2026
CVE-2026-54513 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor 8.1 Élevée 23 juin 2026
CVE-2026-50559 Quarkus is a Java framework for building cloud-native applications 7.5 Élevée 19 juin 2026
CVE-2026-48779 ws is an open source WebSocket client and server for Node.js 7.5 Élevée 16 juin 2026
CVE-2026-12143 form-data is a library for creating readable multipart/form-data streams 8.7 Élevée 12 juin 2026
CVE-2026-50011 Netty is a network application framework for development of protocol servers and clients 7.5 Élevée 12 juin 2026
CVE-2026-50010 Netty is a network application framework for development of protocol servers and clients 7.5 Élevée 12 juin 2026
CVE-2026-48059 Netty is a network application framework for development of protocol servers and clients 8.7 Élevée 12 juin 2026
CVE-2026-48043 Netty is a network application framework for development of protocol servers and clients 5.3 Moyenne 12 juin 2026
CVE-2026-48006 Netty is a network application framework for development of protocol servers and clients 8.7 Élevée 12 juin 2026
CVE-2026-47691 Netty is a network application framework for development of protocol servers and clients 8.7 Élevée 12 juin 2026
CVE-2026-46340 Netty is a network application framework for development of protocol servers and clients 7.5 Élevée 12 juin 2026

Autres produits Red Hat