Known vulnerabilities in Red Hat Single Sign-On 7
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2023-6717 | Keycloak: xss via assertion consumer service url in saml post-binding flow | 6.0 Medium | Apr 25, 2024 |
| CVE-2023-6484 | A log injection flaw was found in Keycloak | 5.3 Medium | Apr 25, 2024 |
| CVE-2023-5685 | Xnio: stackoverflowexception when the chain of notifier states becomes problematically big | 7.5 High | Mar 22, 2024 |
| CVE-2024-1722 | A flaw was found in Keycloak | 3.7 Low | Feb 27, 2024 |
| CVE-2024-1459 | Undertow: directory traversal vulnerability | 5.3 Medium | Feb 12, 2024 |
| CVE-2023-6291 | Keycloak: redirect_uri validation bypass | 7.1 High | Jan 26, 2024 |
| CVE-2023-2585 | Keycloak's device authorization grant does not correctly validate the device code and client ID | 3.5 Low | Dec 21, 2023 |
| CVE-2023-6927 | A flaw was found in Keycloak | 4.6 Medium | Dec 18, 2023 |
| CVE-2023-5236 | Infinispan: circular reference on marshalling leads to dos | 4.4 Medium | Dec 18, 2023 |
| CVE-2023-6134 | A flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to… | 4.6 Medium | Dec 14, 2023 |
| CVE-2023-5379 | Undertow: ajp request closes connection exceeding maxrequestsize | 7.5 High | Dec 12, 2023 |
| CVE-2023-2422 | A flaw was found in Keycloak | 5.5 Medium | Oct 4, 2023 |
| CVE-2022-4245 | A flaw was found in codehaus-plexus | 4.3 Medium | Sep 25, 2023 |
| CVE-2022-4244 | A flaw was found in codeplex-codehaus | 7.5 High | Sep 25, 2023 |
| CVE-2022-4137 | A reflected cross-site scripting (XSS) vulnerability was found in the 'oob' OAuth endpoint due to incorrect null-byte… | 8.1 High | Sep 25, 2023 |
| CVE-2022-4039 | A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured… | 8.0 High | Sep 22, 2023 |
| CVE-2022-3916 | A flaw was found in the offline_access scope in Keycloak | 6.8 Medium | Sep 20, 2023 |
| CVE-2022-1438 | A flaw was found in Keycloak | 6.4 Medium | Sep 20, 2023 |
| CVE-2023-1108 | A flaw was found in undertow | 7.5 High | Sep 14, 2023 |
| CVE-2023-4918 | A flaw was found in the Keycloak package, more specifically org.keycloak.userprofile | 8.8 High | Sep 12, 2023 |
Other Red Hat products
Red Hat Enterprise Linux 9 1867
Red Hat Enterprise Linux 8 1841
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1457
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 631
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433