Vulnérabilités de Red Hat Red Hat Single Sign-On 7

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-16105	A flaw was found in the RoleContainerResource component of Keycloak	4.9 Moyenne	31 juil. 2026
CVE-2026-18215	Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a specific organization…	6.8 Moyenne	31 juil. 2026
CVE-2026-18217	A flaw was found in the SAML protocol implementation of Keycloak, an open-source identity and access management solution	3.4 Faible	31 juil. 2026
CVE-2026-18218	A flaw was found in the TokenManager component of the Keycloak identity management service	4.2 Moyenne	31 juil. 2026
CVE-2026-18201	Keycloak provides a way to manage identity providers and organizations through its administrative API	5.5 Moyenne	29 juil. 2026
CVE-2026-18207	A flaw was found in the client policy enforcement mechanism of Keycloak	6.5 Moyenne	29 juil. 2026
CVE-2026-17059	A flaw was found in the role-users endpoint of the keycloak-services library, which is the core component of the…	6.5 Moyenne	24 juil. 2026
CVE-2026-17048	A flaw was found in the Keycloak Admin REST API, which is used to manage security realms and clients	5.5 Moyenne	24 juil. 2026
CVE-2026-16104	A flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core…	4.3 Moyenne	17 juil. 2026
CVE-2026-16103	A flaw was found in the keycloak-services component of Keycloak	4.3 Moyenne	17 juil. 2026
CVE-2026-16106	A flaw was found in the admin REST API of Keycloak, a solution for identity and access management	4.9 Moyenne	17 juil. 2026
CVE-2026-16108	A flaw was found in the default-groups REST endpoint and realm representation of Keycloak	4.3 Moyenne	17 juil. 2026
CVE-2026-16093	Keycloak provides a mechanism called Client Policies to enforce security requirements on clients, such as requiring them…	5.4 Moyenne	17 juil. 2026
CVE-2026-16089	A flaw was found in the keycloak-services component of Red Hat Build of Keycloak	5.4 Moyenne	17 juil. 2026
CVE-2026-16072	A flaw was found in the organization management component of Keycloak	4.9 Moyenne	17 juil. 2026
CVE-2026-15943	A flaw was found in the Keycloak keycloak-services component, which handles the management of identity providers	5.5 Moyenne	17 juil. 2026
CVE-2026-15945	A flaw was found in the group search functionality of the Keycloak server's administrative API	4.3 Moyenne	16 juil. 2026
CVE-2025-12799	A flaw was found in Jastow	6.5 Moyenne	7 juil. 2026
CVE-2026-14781	A flaw exists in the org.keycloak.broker.oidc package where the OIDC broker incorrectly synchronizes the…	4.8 Moyenne	5 juil. 2026
CVE-2026-14614	A flaw was found in the ClientResource component of Keycloak's admin services when Fine-Grained Admin Permissions (FGAP)…	5.4 Moyenne	3 juil. 2026
CVE-2026-14613	A vulnerability was discovered in Keycloak's administrative interface that allows certain administrators to see…	4.3 Moyenne	3 juil. 2026
CVE-2026-11800	A flaw was found in Keycloak	8.1 Élevée	25 juin 2026
CVE-2026-9800	A flaw was found in Keycloak Policy Enforcer	8.1 Élevée	25 juin 2026
CVE-2026-11998	A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE policies for resource URLs…	7.6 Élevée	24 juin 2026
CVE-2026-54513	jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor	8.1 Élevée	23 juin 2026

Autres produits Red Hat