Red Hat Keycloak Vulnerabilities
Red%20hat Keycloak vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
OutOfMemoryError Vulnerability in Keycloak Authentication with JWT Tokens
CVE-2025-2559Red HatRed Hat Build Of Keycloak4.9MEDIUMWildfly Deployment System Vulnerability: Cross-Site Scripting Attacks Possible
CVE-2024-10234Red Hat7.3HIGHAttackers can Redirect Users to Arbitrary URLs, Exposing Sensitive Information
CVE-2024-8883Red HatRed Hat Build Of Keycloak6.1MEDIUMFlaw in SAML Signature Validation Method Allows Privilege Escalation or Impersonation Attacks
CVE-2024-8698Red HatRed Hat Build Of Keycloak👾🟡EPSS 29%📰7.7HIGHLDAP Endpoint Vulnerability Allows Credentials Leakage
CVE-2024-5967Red HatRed Hat Build Of Keycloak2.7LOWKeycloak: exposure of sensitive information in pushed authorization requests (par) kc_restart cookie
CVE-2024-4540Red HatRed Hat Build Of Keycloak7.5HIGHKeycloak: log injection during webauthn authentication or registration
CVE-2023-6484Red HatRed Hat Build Of Keycl...5.3MEDIUMKeycloak Authentication Bypass Vulnerability
CVE-2023-3597Red Hat5MEDIUMBypass of Redirect URI Validation in Keycloak May Lead to Access Token Theft
CVE-2024-2419Red HatUpstream7.1HIGHStack Overflow Exception in XNIO NotifierState Could Lead to Denial of Service
CVE-2023-5685Red HatEap 7.4.147.5HIGHKeycloak: redirect_uri validation bypass
CVE-2023-6291Red HatRed Hat Build Of Keycl...7.1HIGHClient access via device auth request spoof
CVE-2023-2585Red Hatkeycloak8.1HIGHKeycloak: open redirect via "form_post.jwt" jarm response mode
CVE-2023-6927Red HatRed Hat Build Of Keycl...4.6MEDIUMKeycloak: reflected xss via wildcard in oidc redirect_uri
CVE-2023-6134Red HatRed Hat Build Of Keycl...4.6MEDIUMKeycloak: offline session token dos
CVE-2023-6563Red HatRed Hat Single Sign-on...7.7HIGHOauth client impersonation
CVE-2023-2422Red Hatkeycloak7.1HIGHPlaintext storage of user password
CVE-2023-4918Red Hatkeycloak8.8HIGHPath Traversal Vulnerability in Keycloak by Red Hat
CVE-2020-14366Red HatKeycloak6.8MEDIUMTLS Hostname Verification Flaw in Keycloak by Red Hat
CVE-2020-1758Red HatKeycloak5.3MEDIUMCode Injection Vulnerability in Keycloak by Red Hat
CVE-2020-1714Red HatKeycloak7.5HIGHImproper Access Control in Keycloak by Red Hat
CVE-2020-1718Red HatKeycloak7.1HIGHInformation Disclosure Vulnerability in Keycloak by Red Hat
CVE-2020-1724Red HatKeycloak4.3MEDIUMInformation Disclosure Vulnerability in Keycloak by Red Hat
CVE-2020-1698Red HatKeycloak5MEDIUMBrute Force Protection Flaw in Keycloak by Red Hat
CVE-2020-1744Red HatKeycloak5.6MEDIUMKeycloak Operator Password Management Flaw in Red Hat Product
CVE-2020-1731Red HatKeycloak9.1CRITICAL