Vulnerabilities of n/a Keycloak
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2023-4918 | A flaw was found in the Keycloak package, more specifically org.keycloak.userprofile | 8.8 High | Sep 12, 2023 |
| CVE-2023-1664 | A flaw was found in Keycloak | 6.5 Medium | May 26, 2023 |
| CVE-2022-1274 | A flaw was found in Keycloak in the execute-actions-email endpoint | Not rated | Mar 29, 2023 |
| CVE-2022-2237 | A flaw was found in the Keycloak Node.js Adapter | 6.1 Medium | Mar 27, 2023 |
| CVE-2022-2256 | A Stored Cross-site scripting (XSS) vulnerability was found in keycloak as shipped in Red Hat Single Sign-On 7 | Not rated | Sep 1, 2022 |
| CVE-2022-0225 | A flaw was found in Keycloak | Not rated | Aug 26, 2022 |
| CVE-2021-3632 | A flaw was found in Keycloak | Not rated | Aug 26, 2022 |
| CVE-2021-3754 | A flaw was found in keycloak where an attacker is able to register himself with the username same as the email ID of any… | Not rated | Aug 26, 2022 |
| CVE-2021-3856 | ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the… | Not rated | Aug 26, 2022 |
| CVE-2020-35509 | A flaw was found in keycloak affecting versions 11.0.3 and 12.0.0 | 5.4 Medium | Aug 23, 2022 |
| CVE-2021-3827 | A flaw was found in keycloak, where the default ECP binding flow allows other authentication flows to be bypassed | Not rated | Aug 23, 2022 |
| CVE-2021-3513 | A flaw was found in keycloak where a brute force attack is possible even when the permanent lockout feature is enabled | Not rated | Aug 22, 2022 |
| CVE-2022-2668 | An issue was discovered in Keycloak that allows arbitrary Javascript to be uploaded for the SAML protocol mapper even if… | Not rated | Aug 5, 2022 |
| CVE-2022-1245 | A privilege escalation flaw was found in the token exchange feature of keycloak | Not rated | Jul 7, 2022 |
| CVE-2021-3461 | A flaw was found in keycloak where keycloak may fail to logout user session if the logout request comes from external… | Not rated | Apr 1, 2022 |
| CVE-2021-4133 | A flaw was found in Keycloak in versions from 12.0.0 and before 15.1.1 which allows an attacker with any existing user… | Not rated | Jan 25, 2022 |
| CVE-2021-3424 | A flaw was found in keycloak as shipped in Red Hat Single Sign-On 7.4 where IDN homograph attacks are possible | Not rated | Jun 1, 2021 |
| CVE-2021-20195 | A flaw was found in keycloak in versions before 13.0.0 | Not rated | May 28, 2021 |
| CVE-2020-27826 | A flaw was found in Keycloak before version 12.0.0 where it is possible to update the user's metadata attributes using… | Not rated | May 28, 2021 |
| CVE-2021-20202 | A flaw was found in keycloak | Not rated | May 12, 2021 |
| CVE-2021-20222 | A flaw was found in keycloak | Not rated | Mar 23, 2021 |
| CVE-2021-20262 | A flaw was found in Keycloak 12.0.0 where re-authentication does not occur while updating the password | Not rated | Mar 9, 2021 |
| CVE-2020-27838 | A flaw was found in keycloak in versions prior to 13.0.0 | Not rated | Mar 8, 2021 |
| CVE-2020-14359 | A vulnerability was found in all versions of Keycloak Gatekeeper, where on using lower case HTTP headers (via cURL) an… | Not rated | Feb 23, 2021 |
| CVE-2020-10734 | A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF protection | Not rated | Feb 11, 2021 |
Other n/a products
n/a 144660
Android 2441
kernel 279
Open5GS 125
Intel(R) Processors 119
BIG-IP 110
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions 106
HPE Intelligent Management Center (IMC) PLAT 105
Moodle 89
Aruba ClearPass Policy Manager 83
GPAC 80
postgresql 79