Known vulnerabilities in Red Hat build of Keycloak - page 2

Vendor: Red Hat Inc.
Software: Red Hat build of Keycloak
Software CPE: cpe:2.3:a:red_hat:red_hat_build_of_keycloak:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 70
Public exploits: 5
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat build of Keycloak Red Hat build of Keycloak is affected by 70 known vulnerabilities: 1 critical, 9 high, 34 medium, 26 low Critical High Medium Low

Vulnerabilities (70)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117685 - Resource exhaustion
CVE-2025-11419		 CWE-400 Medium
No
No
 26.0.16, 26.2.10 27.10.2025 SB2025102757
SB2025102760
SB2025102761
and 2 more
#VU116860 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2025-10044		 CWE-451 Low
No
No
 26.0.17 09.10.2025 SB2025100922
SB2025110744
SB2025110745
#VU115003 - Command injection
CVE-2025-8419		 CWE-77 Medium
No
No
 26.0.15, 26.2.8 09.09.2025 SB2025090931
SB2025090932
SB2025090933
and 2 more
#VU115002 - Improper input validation
CVE-2025-9162		 CWE-20 Low
No
No
 26.0.15, 26.2.8 09.09.2025 SB2025090931
SB2025090932
SB2025090933
and 2 more
#VU113570 - Improper Privilege Management
CVE-2025-7784		 CWE-269 Medium
No
No
 26.2.6 31.07.2025 SB2025073159
SB2025073185
SB2025073186
#VU113569 - Origin Validation Error
CVE-2025-7365		 CWE-346 Medium
No
No
 26.0.13, 26.2.6 31.07.2025 SB2025073159
SB2025073183
SB2025073184
and 2 more
#VU113187 - Double Free
CVE-2025-8058		 CWE-415 High
No
No
 26.0.15 24.07.2025 SB2025072408
SB2025072511
SB2025072512
and 59 more
#VU112941 - Improper input validation
CVE-2025-30754		 CWE-20 Medium
No
No
 26.0.13, 26.2.6 16.07.2025 SB2025071686
SB2025071692
SB2025071783
and 108 more
#VU112936 - Improper input validation
CVE-2025-50059		 CWE-20 High
No
No
 26.0.13, 26.2.6 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 54 more
#VU112937 - Improper input validation
CVE-2025-30749		 CWE-20 High
No
No
 26.0.13, 26.2.6 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 101 more
#VU112938 - Improper input validation
CVE-2025-50106		 CWE-20 High
No
No
 26.0.13, 26.2.6 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 100 more
#VU111872 - Resource Management Errors
CVE-2025-5702		 CWE-399 Medium
No
No
 26.0.13, 26.2.6 24.06.2025 SB2025062437
SB2025062438
SB2025062439
and 11 more
#VU108092 - Resource Management Errors
CVE-2025-2559		 CWE-399 Medium
No
No
 26.0.11 30.04.2025 SB2025043010
SB2025043036
SB2025043037
#VU108075 - Improper Validation of Certificate with Host Mismatch
CVE-2025-3501		 CWE-297 Medium
No
No
 26.0.11, 26.2.5 30.04.2025 SB2025043010
SB2025043036
SB2025043037
and 2 more
#VU107520 - Improper input validation
CVE-2025-21587		 CWE-20 Medium
No
No
 26.0.11 16.04.2025 SB20250416145
SB20250416146
SB20250416147
and 103 more
#VU107521 - Improper input validation
CVE-2025-30698		 CWE-20 Medium
No
No
 26.0.11 16.04.2025 SB20250416145
SB20250416146
SB20250416147
and 93 more
#VU107522 - Improper input validation
CVE-2025-30691		 CWE-20 Medium
No
No
 26.0.11 16.04.2025 SB20250416146
SB20250416159
SB2025042933
and 33 more
#VU103980 - Resource exhaustion
CVE-2024-12133		 CWE-400 Medium
No
No
 26.2.5 14.02.2025 SB2025021428
SB2025021429
SB2025021430
and 78 more
#VU100095 - Memory corruption
CVE-2024-47072		 CWE-119 Medium
No
No
 26.2.5 07.11.2024 SB20241107102
SB20241115126
SB2024112531
and 36 more
#VU64274 - Out-of-bounds read
CVE-2022-29458		 CWE-125 Medium
No
No
 26.0.15 14.06.2022 SB2022061418
SB2022061419
SB2022072842
and 29 more


Showing elements 21 - 40 out of 70