RH
Product
Red Hat Single Sign-On 7
125
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 15High 56Medium 45Low 9
Watch
Add Red Hat Single Sign-On 7 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-5379 | 7.5 | Dec 12 | Undertow: ajp request closes connection exceeding maxrequestsize Affected: All versions, or not specified |
| CVE-2026-114488 New | 7.4 | Oct 29 | Wildfly: wildfly-iiop: wildfly-ejb3: wildfly: authentication bypass on iiop ejb invocations as csiv2 ittprincipalname accepted without transport binding Affected: All versions, or not specified |
| CVE-2026-89058 | 7.4 | Sep 18 | Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config Affected: All versions, or not specified |
| CVE-2026-19611 | 7.4 | Aug 20 | Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding Affected: All versions, or not specified |
| CVE-2023-4639 | 7.4 | Nov 17 | Undertow: cookie smuggling/spoofing Affected: All versions, or not specified |
| CVE-2026-84823 | 7.1 | Oct 15 | Org.wildfly.core: wildfly: path traversal in take-snapshot discloses the server configuration to the monitor role Affected: All versions, or not specified |