Known vulnerabilities in Red Hat build of Keycloak - page 3

Vendor: Red Hat Inc.
Software: Red Hat build of Keycloak
Software CPE: cpe:2.3:a:red_hat:red_hat_build_of_keycloak:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 70
Public exploits: 5
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat build of Keycloak Red Hat build of Keycloak is affected by 70 known vulnerabilities: 1 critical, 9 high, 34 medium, 26 low Critical High Medium Low

Vulnerabilities (70)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU108074 - Protection Mechanism Failure
CVE-2025-3910		 CWE-693 Low
No
No
 26.0.11 30.04.2025 SB2025043010
SB2025043036
SB2025043037
#VU105509 - Improper Access Control
CVE-2025-1391		 CWE-284 Medium
No
No
 26.0.10 11.03.2025 SB2025031143
SB2025031144
SB2025031145
#VU105508 - Improper Authentication
CVE-2025-0604		 CWE-287 Low
No
No
 26.0.10 11.03.2025 SB2025031143
SB2025031144
SB2025031145
#VU103687 - Memory corruption
CVE-2025-0395		 CWE-119 Medium
No
No
 26.0.11 06.02.2025 SB2025020664
SB2025020667
SB2025020668
and 66 more
#VU103159 - Improper input validation
CVE-2025-21502		 CWE-20 Medium
No
No
 26.0.10 21.01.2025 SB2025012221
SB2025012222
SB2025012223
and 44 more
#VU102570 - Exposure of sensitive information to an unauthorized actor
CVE-2024-11736		 CWE-200 Low
No
No
 26.0.8 13.01.2025 SB2025011349
SB2025011363
SB2025011364
and 1 more
#VU102569 - Protection Mechanism Failure
CVE-2024-11734		 CWE-693 Low
No
No
 26.0.8 13.01.2025 SB2025011349
SB2025011363
SB2025011364
#VU100910 - Improper Authentication
CVE-2024-10039		 CWE-287 High
No
No
 24.0.9, 26.0.6 25.11.2024 SB2024112532
SB2024112533
SB2024112534
and 2 more
#VU100909 - Improper input validation
CVE-2024-9666		 CWE-20 Medium
No
No
 24.0.9, 26.0.6 25.11.2024 SB2024112532
SB2024112533
SB2024112534
and 3 more
#VU100908 - External Control of File Name or Path
CVE-2024-10492		 CWE-73 Low
No
No
 24.0.9, 26.0.6 25.11.2024 SB2024112532
SB2024112533
SB2024112534
and 2 more
#VU100907 - Incorrect Regular Expression
CVE-2024-10270		 CWE-185 Medium
No
No
 24.0.9, 26.0.6 25.11.2024 SB2024112532
SB2024112533
SB2024112534
and 2 more
#VU100906 - Exposure of sensitive information to an unauthorized actor
CVE-2024-10451		 CWE-200 Medium
No
No
 24.0.9, 26.0.6 25.11.2024 SB2024112532
SB2024112533
SB2024112534
and 2 more
#VU97629 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-7260		 CWE-601 Low
No
No
 24.0.7 20.09.2024 SB2024092017
SB2024092086
SB2024092087
#VU97628 - Improper Authentication
CVE-2024-7318		 CWE-287 Low
No
No
 24.0.7 20.09.2024 SB2024092017
SB2024092086
SB2024092087
#VU97622 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-8883		 CWE-601 Low
No
No
 22.0.13, 24.0.8 20.09.2024 SB2024092009
SB2024092069
SB2024092070
and 12 more
#VU97621 - Improper Verification of Cryptographic Signature
CVE-2024-8698		 CWE-347 Medium
Available
No
 22.0.13, 24.0.8 20.09.2024 SB2024092009
SB2024092069
SB2024092070
and 11 more
#VU97468 - Improper Restriction of Excessive Authentication Attempts
CVE-2024-4629		 CWE-307 Medium
No
No
 22.0.12 18.09.2024 SB2024091823
SB2024092059
SB2024092060
and 5 more
#VU97432 - Session Fixation
CVE-2024-7341		 CWE-384 Medium
No
No
 22.0.12, 24.0.7 17.09.2024 SB2024091740
SB2024092059
SB2024092060
and 9 more
#VU93095 - Exposure of sensitive information to an unauthorized actor
CVE-2024-5967		 CWE-200 Low
No
No
 22.0.12 24.06.2024 SB2024062410
SB2024092059
SB2024092060
and 5 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 26.0.10 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more


Showing elements 41 - 60 out of 70