Known vulnerabilities in rh-sso7-keycloak (Red Hat package)
Vendor:
Red Hat Inc.
Software:
rh-sso7-keycloak (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:rh-sso7-keycloak_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
95
Public exploits:
8
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
18.0.19-1.redhat_00002.1.el9sso
18.0.19-1.redhat_00002.1.el8sso
18.0.19-1.redhat_00002.1.el7sso
2.5.14-1.Final_redhat_1.1.jbcs.el6
2.5.14-1.Final_redhat_1.1.jbcs.el7
18.0.18-1.redhat_00001.1.el9sso
18.0.18-1.redhat_00001.1.el8sso
18.0.18-1.redhat_00001.1.el7sso
18.0.16-1.redhat_00001.1.el9sso
18.0.16-1.redhat_00001.1.el8sso
18.0.16-1.redhat_00001.1.el7sso
18.0.14-1.redhat_00001.1.el9sso
18.0.14-1.redhat_00001.1.el8sso
18.0.14-1.redhat_00001.1.el7sso
18.0.13-1.redhat_00001.1.el9sso
18.0.13-1.redhat_00001.1.el8sso
18.0.13-1.redhat_00001.1.el7sso
18.0.12-1.redhat_00001.1.el8sso
18.0.12-1.redhat_00001.1.el9sso
18.0.12-1.redhat_00001.1.el7sso
18.0.11-3.redhat_00001.1.el9sso
18.0.11-3.redhat_00001.1.el8sso
18.0.11-3.redhat_00001.1.el7sso
18.0.11-2.redhat_00003.1.el9sso
18.0.11-2.redhat_00003.1.el8sso
18.0.11-2.redhat_00003.1.el7sso
18.0.9-1.redhat_00001.1.el7sso
18.0.9-1.redhat_00001.1.el8sso
18.0.9-1.redhat_00001.1.el9sso
18.0.8-1.redhat_00001.1.el9sso
18.0.8-1.redhat_00001.1.el8sso
18.0.8-1.redhat_00001.1.el7sso
18.0.7-1.redhat_00001.1.el7sso
18.0.7-1.redhat_00001.1.el8sso
18.0.7-1.redhat_00001.1.el9sso
18.0.6-1.redhat_00001.1.el7sso
18.0.6-1.redhat_00001.1.el8sso
18.0.6-1.redhat_00001.1.el9sso
15.0.2-3.redhat_00002.1.el7sso
15.0.2-3.redhat_00002.1.el8sso
9.0.15-1.redhat_00002.1.el8sso
9.0.15-1.redhat_00002.1.el7sso
9.0.15-1.redhat_00002.1.el6sso
9.0.13-1.redhat_00006.1.el8sso
9.0.13-1.redhat_00006.1.el7sso
9.0.13-1.redhat_00006.1.el6sso
9.0.12-1.redhat_00001.1.el8sso
9.0.12-1.redhat_00001.1.el7sso
9.0.12-1.redhat_00001.1.el6sso
9.0.9-1.redhat_00001.1.el7sso
9.0.9-1.redhat_00001.1.el6sso
9.0.5-1.redhat_00001.1.el8sso
9.0.5-1.redhat_00001.1.el7sso
9.0.5-1.redhat_00001.1.el6sso
4.8.20-1.Final_redhat_00001.1.el8sso
4.8.20-1.Final_redhat_00001.1.el7sso
4.8.20-1.Final_redhat_00001.1.el6sso
4.8.18-1.Final_redhat_00001.1.el8sso
4.8.18-1.Final_redhat_00001.1.el7sso
4.8.18-1.Final_redhat_00001.1.el6sso
4.8.13-1.Final_redhat_00001.1.el8sso
4.8.13-1.Final_redhat_00001.1.el6sso
3.4.17-1.Final_redhat_00001.1.jbcs.el6
3.4.17-1.Final_redhat_00001.1.jbcs.el7
18.0.3-1.redhat_00002.1.el7sso
18.0.3-1.redhat_00002.1.el9sso
18.0.3-1.redhat_00002.1.el8sso
18.0.3-1.redhat_00001.1.el7sso
18.0.3-1.redhat_00001.1.el8sso
15.0.8-1.redhat_00001.1.el7sso
15.0.8-1.redhat_00001.1.el8sso
15.0.6-1.redhat_00002.1.el8sso
15.0.6-1.redhat_00002.1.el7sso
15.0.6-1.redhat_00001.1.el8sso
15.0.6-1.redhat_00001.1.el7sso
15.0.4-1.redhat_00003.1.el7sso
15.0.4-1.redhat_00003.1.el8sso
Vulnerabilities (95)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU105956 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-10234 |
CWE-79 | Low | 18.0.19-1.redhat_00002.1.el7sso, 18.0.19-1.redhat_00002.1.el8sso, 18.0.19-1.redhat_00002.1.el9sso | 24.03.2025 |
SB2025032404 SB2025032458 SB2025072352 and 3 more |
||
| #VU97622 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2024-8883 |
CWE-601 | Low | 18.0.18-1.redhat_00001.1.el7sso, 18.0.18-1.redhat_00001.1.el8sso, 18.0.18-1.redhat_00001.1.el9sso | 20.09.2024 |
SB2024092009 SB2024092069 SB2024092070 and 12 more |
||
| #VU97621 - Improper Verification of Cryptographic Signature CVE-2024-8698 |
CWE-347 | Medium | 18.0.18-1.redhat_00001.1.el7sso, 18.0.18-1.redhat_00001.1.el8sso, 18.0.18-1.redhat_00001.1.el9sso | 20.09.2024 |
SB2024092009 SB2024092069 SB2024092070 and 11 more |
||
| #VU97468 - Improper Restriction of Excessive Authentication Attempts CVE-2024-4629 |
CWE-307 | Medium | 18.0.16-1.redhat_00001.1.el7sso, 18.0.16-1.redhat_00001.1.el8sso, 18.0.16-1.redhat_00001.1.el9sso | 18.09.2024 |
SB2024091823 SB2024092059 SB2024092060 and 5 more |
||
| #VU97432 - Session Fixation CVE-2024-7341 |
CWE-384 | Medium | 18.0.16-1.redhat_00001.1.el7sso, 18.0.16-1.redhat_00001.1.el8sso, 18.0.16-1.redhat_00001.1.el9sso | 17.09.2024 |
SB2024091740 SB2024092059 SB2024092060 and 9 more |
||
| #VU93095 - Exposure of sensitive information to an unauthorized actor CVE-2024-5967 |
CWE-200 | Low | 18.0.16-1.redhat_00001.1.el7sso, 18.0.16-1.redhat_00001.1.el8sso, 18.0.16-1.redhat_00001.1.el9sso | 24.06.2024 |
SB2024062410 SB2024092059 SB2024092060 and 5 more |
||
| #VU93088 - Exposure of sensitive information to an unauthorized actor CVE-2024-4540 |
CWE-200 | Low | 18.0.14-1.redhat_00001.1.el7sso, 18.0.14-1.redhat_00001.1.el8sso, 18.0.14-1.redhat_00001.1.el9sso | 24.06.2024 |
SB2024062409 SB2024092061 SB2024092074 and 8 more |
||
| #VU88799 - Permissions, Privileges, and Access Controls CVE-2024-1249 |
CWE-264 | Medium | 18.0.13-1.redhat_00001.1.el7sso, 18.0.13-1.redhat_00001.1.el8sso, 18.0.13-1.redhat_00001.1.el9sso | 17.04.2024 |
SB20240417142 SB20240417148 SB20240417149 and 5 more |
||
| #VU88798 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-1132 |
CWE-22 | Medium | 18.0.13-1.redhat_00001.1.el7sso, 18.0.13-1.redhat_00001.1.el8sso, 18.0.13-1.redhat_00001.1.el9sso | 17.04.2024 |
SB20240417142 SB20240417148 SB20240417149 and 8 more |
||
| #VU88793 - Improper Authorization CVE-2023-6544 |
CWE-285 | Medium | 18.0.13-1.redhat_00001.1.el7sso, 18.0.13-1.redhat_00001.1.el8sso, 18.0.13-1.redhat_00001.1.el9sso | 17.04.2024 |
SB20240417142 SB20240417148 SB20240417149 and 2 more |
||
| #VU88154 - Resource exhaustion CVE-2024-1635 |
CWE-400 | Medium | 18.0.13-1.redhat_00001.1.el7sso, 18.0.13-1.redhat_00001.1.el8sso, 18.0.13-1.redhat_00001.1.el9sso | 04.04.2024 |
SB2024040460 SB2024040537 SB2024040538 and 8 more |
||
| #VU86549 - Improper Output Neutralization for Logs CVE-2023-6484 |
CWE-117 | Medium | 18.0.12-1.redhat_00001.1.el7sso, 18.0.12-1.redhat_00001.1.el8sso, 18.0.12-1.redhat_00001.1.el9sso, 18.0.13-1.redhat_00001.1.el7sso, 18.0.13-1.redhat_00001.1.el8sso, 18.0.13-1.redhat_00001.1.el9sso | 15.02.2024 |
SB2024021539 SB2024021546 SB2024021547 and 7 more |
||
| #VU85171 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2023-6927 |
CWE-601 | Low | 18.0.11-3.redhat_00001.1.el7sso, 18.0.11-3.redhat_00001.1.el8sso, 18.0.11-3.redhat_00001.1.el9sso, 18.0.12-1.redhat_00001.1.el7sso, 18.0.12-1.redhat_00001.1.el8sso, 18.0.12-1.redhat_00001.1.el9sso | 09.01.2024 |
SB2024010930 SB2024010985 SB2024010986 and 6 more |
||
| #VU84615 - Resource exhaustion CVE-2023-6563 |
CWE-400 | Medium | 18.0.11-2.redhat_00003.1.el7sso, 18.0.11-2.redhat_00003.1.el8sso, 18.0.11-2.redhat_00003.1.el9sso | 20.12.2023 |
SB2023122039 SB2023122143 SB2023122144 and 3 more |
||
| #VU84614 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2023-6291 |
CWE-601 | Low | 18.0.11-2.redhat_00003.1.el7sso, 18.0.11-2.redhat_00003.1.el8sso, 18.0.11-2.redhat_00003.1.el9sso, 18.0.12-1.redhat_00001.1.el7sso, 18.0.12-1.redhat_00001.1.el8sso, 18.0.12-1.redhat_00001.1.el9sso | 20.12.2023 |
SB2023122038 SB2023122143 SB2023122144 and 7 more |
||
| #VU84532 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-6134 |
CWE-79 | Low | 18.0.11-2.redhat_00003.1.el7sso, 18.0.11-2.redhat_00003.1.el8sso, 18.0.11-2.redhat_00003.1.el9sso, 18.0.12-1.redhat_00001.1.el7sso, 18.0.12-1.redhat_00001.1.el8sso, 18.0.12-1.redhat_00001.1.el9sso | 19.12.2023 |
SB2023121901 SB2023122143 SB2023122144 and 7 more |
||
| #VU83241 - Information Exposure Through Log Files CVE-2023-44483 |
CWE-532 | Medium | 18.0.12-1.redhat_00001.1.el7sso, 18.0.12-1.redhat_00001.1.el8sso, 18.0.12-1.redhat_00001.1.el9sso | 17.11.2023 |
SB2023111724 SB2023111747 SB2023120143 and 76 more |
||
| #VU77107 - Incorrect Default Permissions CVE-2023-2976 |
CWE-276 | Low | 18.0.12-1.redhat_00001.1.el7sso, 18.0.12-1.redhat_00001.1.el8sso, 18.0.12-1.redhat_00001.1.el9sso | 08.06.2023 |
SB2023060849 SB2023071712 SB2023072512 and 157 more |
||
| #VU75218 - Resource exhaustion CVE-2023-26048 |
CWE-400 | Medium | 18.0.12-1.redhat_00001.1.el7sso, 18.0.12-1.redhat_00001.1.el8sso, 18.0.12-1.redhat_00001.1.el9sso | 18.04.2023 |
SB2023041842 SB2023051753 SB2023060701 and 55 more |
||
| #VU75217 - Improper input validation CVE-2023-26049 |
CWE-20 | Low | 18.0.12-1.redhat_00001.1.el7sso, 18.0.12-1.redhat_00001.1.el8sso, 18.0.12-1.redhat_00001.1.el9sso | 18.04.2023 |
SB2023041842 SB2023051821 SB2023060836 and 78 more |
Showing elements 1 - 20 out of 95