Aller au contenu

Vulnérabilités connues pour Red Hat Build of Keycloak

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-1518 A flaw was found in Keycloak’s CIBA feature where insufficient validation of client-configured backchannel… 2.7 Faible 2 févr. 2026
CVE-2025-13881 A flaw was found in Keycloak Admin API 2.7 Faible 2 févr. 2026
CVE-2024-4027 Undertow: outofmemoryerror in httpservletrequestimpl.getparameternames() can cause remote dos attacks 7.5 Élevée 30 janv. 2026
CVE-2026-1190 A flaw was found in Keycloak's SAML brokering functionality 3.1 Faible 26 janv. 2026
CVE-2025-14083 A flaw was found in the Keycloak Admin REST API 2.7 Faible 21 janv. 2026
CVE-2025-14559 A flaw was found in the keycloak-services component of Keycloak 6.5 Moyenne 21 janv. 2026
CVE-2026-1035 A flaw was found in the Keycloak server during refresh token processing, specifically in the TokenManager class… 3.1 Faible 21 janv. 2026
CVE-2026-1180 A flaw was identified in Keycloak’s OpenID Connect Dynamic Client Registration feature when clients authenticate using… 5.8 Moyenne 20 janv. 2026
CVE-2026-0976 A flaw was found in Keycloak 3.7 Faible 15 janv. 2026
CVE-2026-0707 A flaw was found in Keycloak 5.3 Moyenne 8 janv. 2026
CVE-2025-14777 A flaw was found in Keycloak 6.0 Moyenne 16 déc. 2025
CVE-2025-14082 A flaw was found in Keycloak Admin REST (Representational State Transfer) API 2.7 Faible 10 déc. 2025
CVE-2024-3884 Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded Élevée 3 déc. 2025
CVE-2025-8419 A vulnerability was found in Keycloak-services 5.3 Moyenne 6 août 2025
CVE-2025-5416 A vulnerability has been identified in Keycloak that could lead to unauthorized information disclosure 2.7 Faible 20 juin 2025
CVE-2025-3910 A flaw was found in Keycloak 5.4 Moyenne 29 avr. 2025
CVE-2025-3501 A flaw was found in Keycloak 8.2 Élevée 29 avr. 2025
CVE-2025-2559 A flaw was found in Keycloak 4.9 Moyenne 25 mars 2025
CVE-2025-23368 Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli 8.1 Élevée 4 mars 2025
CVE-2024-4028 A vulnerability was found in Keycloak 3.8 Faible 18 févr. 2025
CVE-2025-1391 A flaw was found in the Keycloak organization feature, which allows the incorrect assignment of an organization to a… 5.4 Moyenne 17 févr. 2025
CVE-2025-23367 Org.wildfly.core:wildfly-server: wildfly improper rbac permission 6.5 Moyenne 30 janv. 2025
CVE-2025-0604 A flaw was found in Keycloak 5.4 Moyenne 22 janv. 2025
CVE-2024-11736 A vulnerability was found in Keycloak 4.9 Moyenne 14 janv. 2025
CVE-2024-11734 A denial of service vulnerability was found in Keycloak that could allow an administrative user with the right to change… 6.5 Moyenne 14 janv. 2025

Autres produits Red Hat