Aller au contenu

Vulnérabilités de Red Hat Red Hat Single Sign-On 7

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-19610 A flaw was found in the platform-mbean component of JBoss EAP, which provides management access to JVM-level metrics and… 6.5 Moyenne 29 oct. 2026
CVE-2026-114438 A flaw was found in the Update User Locale required action of the Keycloak identity and access management solution 4.2 Moyenne 21 oct. 2026
CVE-2026-114370 A flaw was found in the PathResourceManager component of the Undertow web server 3.7 Faible 21 oct. 2026
CVE-2026-84823 A flaw was found in WildFly 7.1 Élevée 15 oct. 2026
CVE-2026-85634 A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by… 8.8 Élevée 15 oct. 2026
CVE-2026-109082 A flaw was found in the Client-Initiated Backchannel Authentication CIBA implementation within the keycloak-services… 6.8 Moyenne 12 oct. 2026
CVE-2026-107889 A flaw was found in the login theme rendering component of Keycloak 5.5 Moyenne 9 oct. 2026
CVE-2026-107623 A flaw was found in the OIDC Dynamic Client Registration (DCR) component of Keycloak 4.3 Moyenne 8 oct. 2026
CVE-2026-107604 A flaw was found in the installation provider and client registration endpoints of the Keycloak identity management… 4.9 Moyenne 8 oct. 2026
CVE-2026-107121 A flaw was found in the SMTP email configuration handling of the keycloak-services component 6.5 Moyenne 7 oct. 2026
CVE-2026-105305 A flaw was found in the OIDC implementation of Keycloak, specifically within the Device Authorization Grant flow 5.4 Moyenne 6 oct. 2026
CVE-2026-105306 A flaw was found in the Dynamic Client Registration flow of the Keycloak identity and access management server 6.5 Moyenne 5 oct. 2026
CVE-2026-105302 A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution 5.7 Moyenne 5 oct. 2026
CVE-2026-105301 A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access… 4.0 Moyenne 5 oct. 2026
CVE-2026-103884 A flaw was found in the X.509 client certificate authenticator of Keycloak 6.5 Moyenne 1 oct. 2026
CVE-2026-101333 A flaw was found in the Micrometer user-event metrics listener of Keycloak, a solution for integrated identity and… 3.7 Faible 28 sept. 2026
CVE-2026-96448 A flaw was found in the Fine-Grained Admin Permissions (FGAP v2) feature of Keycloak, an identity and access… 6.6 Moyenne 25 sept. 2026
CVE-2026-97846 Keycloak provides a feature called mTLS holder-of-key binding which ensures that a token can only be used by the… 6.8 Moyenne 25 sept. 2026
CVE-2026-97311 A flaw was found in the Admin REST API of Keycloak, an identity and access management solution 4.3 Moyenne 24 sept. 2026
CVE-2026-97177 A flaw was found in the user update mechanism of the Keycloak Admin REST API 6.6 Moyenne 24 sept. 2026
CVE-2026-97176 A flaw was found in the Level of Authentication enforcement mechanism of Keycloak, an identity and access management… 4.2 Moyenne 24 sept. 2026
CVE-2026-96445 A flaw was found in the Conditional OTP authenticator of Keycloak, an identity and access management solution 6.8 Moyenne 23 sept. 2026
CVE-2026-96446 A flaw was found in the Pushed Authorization Request PAR implementation of Keycloak 4.2 Moyenne 23 sept. 2026
CVE-2026-95503 A flaw was found in the Kerberos federation provider of Keycloak, an open-source identity and access management solution 6.8 Moyenne 22 sept. 2026
CVE-2026-94218 A flaw was found in the authentication session management of Keycloak, an identity and access management solution 3.1 Faible 21 sept. 2026

Autres produits Red Hat