RH
Product
Red Hat Single Sign-On 7.6 for RHEL 7
32
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Severity mix
Critical 1High 20Medium 10Low 1
Watch
Add Red Hat Single Sign-On 7.6 for RHEL 7 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-3916 | 6.8 | Sep 20 | Keycloak: session takeover with oidc offline refreshtokens Affected: All versions, or not specified |
| CVE-2024-4629 | 6.5 | Sep 3 | Keycloak: potential bypass of brute force protection Affected: All versions, or not specified |
| CVE-2024-8883 | 6.1 | Sep 19 | Keycloak: vulnerable redirect uri validation results in open redirec Affected: All versions, or not specified |
| CVE-2023-6927 | 6.1 | Dec 18 | Keycloak: open redirect via "form_post.jwt" jarm response mode Affected: All versions, or not specified |
| CVE-2022-4137 | 6.1 | Sep 25 | Keycloak: reflected xss attack Affected: All versions, or not specified |
| CVE-2023-6544 | 5.4 | Apr 25 | Keycloak: authorization bypass Affected: All versions, or not specified |
| CVE-2023-6134 | 5.4 | Dec 14 | Keycloak: reflected xss via wildcard in oidc redirect_uri Affected: All versions, or not specified |
| CVE-2026-2575 | 5.3 | Mar 18 | Keycloak: keycloak: denial of service due to excessive samlrequest decompression Affected: All versions, or not specified |
| CVE-2023-6484 | 5.3 | Apr 25 | Keycloak: log injection during webauthn authentication or registration Affected: All versions, or not specified |
| CVE-2022-1438 | 4.8 | Sep 20 | Keycloak: xss on impersonation under specific circumstances Affected: All versions, or not specified |
Showing 10