Known vulnerabilities in Red Hat build of Keycloak - page 8

Vendor: Red Hat Inc.
Software: Red Hat build of Keycloak
Software CPE: cpe:2.3:a:red_hat:red_hat_build_of_keycloak:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 153
Public exploits: 5
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat build of Keycloak Red Hat build of Keycloak is affected by 153 known vulnerabilities: 1 critical, 10 high, 63 medium, 79 low Critical High Medium Low

Vulnerabilities (153)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97468 - Improper Restriction of Excessive Authentication Attempts
CVE-2024-4629		 CWE-307 Medium
No
No
 22.0.12 18.09.2024 SB2024091823
SB2024092059
SB2024092060
and 5 more
#VU97432 - Session Fixation
CVE-2024-7341		 CWE-384 Medium
No
No
 22.0.12, 24.0.7 17.09.2024 SB2024091740
SB2024092059
SB2024092060
and 9 more
#VU93095 - Exposure of sensitive information to an unauthorized actor
CVE-2024-5967		 CWE-200 Low
No
No
 22.0.12 24.06.2024 SB2024062410
SB2024092059
SB2024092060
and 5 more
#VU93088 - Exposure of sensitive information to an unauthorized actor
CVE-2024-4540		 CWE-200 Low
No
No
 22.0.11, 24.0.5 24.06.2024 SB2024062409
SB2024092061
SB2024092074
and 8 more
#VU89712 - Stack-based buffer overflow
CVE-2024-33599		 CWE-121 High
No
No
 22.0.11, 24.0.5 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 84 more
#VU89711 - NULL Pointer Dereference
CVE-2024-33600		 CWE-476 Medium
No
No
 22.0.11, 24.0.5 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 83 more
#VU89710 - Allocation of Resources Without Limits or Throttling
CVE-2024-33601		 CWE-770 Low
No
No
 22.0.11, 24.0.5 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 82 more
#VU89709 - Memory corruption
CVE-2024-33602		 CWE-119 Medium
No
No
 22.0.11, 24.0.5 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 91 more
#VU88822 - Memory corruption
CVE-2024-2961		 CWE-119 High
Available
Exploited
 22.0.11, 24.0.5 18.04.2024 SB2024041855
SB2024041856
SB2024041857
and 107 more
#VU88666 - Improper input validation
CVE-2024-21011		 CWE-20 Low
No
No
 22.0.11 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 132 more
#VU88667 - Improper input validation
CVE-2024-21068		 CWE-20 Low
No
No
 22.0.11 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 72 more
#VU88668 - Improper input validation
CVE-2024-21094		 CWE-20 Low
No
No
 22.0.11 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 126 more
#VU88669 - Improper input validation
CVE-2024-21012		 CWE-20 Low
No
No
 22.0.11 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 68 more


Showing elements 141 - 160 out of 153