Known vulnerabilities in rh-sso7-keycloak (Red Hat package) 15.0.4-1.redhat_00003.1.el8sso
Vendor:
Red Hat Inc.
Software:
rh-sso7-keycloak (Red Hat package)
Version:
15.0.4-1.redhat_00003.1.el8sso
Software CPE:
cpe:2.3:o:red_hat:rh-sso7-keycloak_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
9
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
18.0.19-1.redhat_00002.1.el9sso
18.0.19-1.redhat_00002.1.el8sso
18.0.19-1.redhat_00002.1.el7sso
2.5.14-1.Final_redhat_1.1.jbcs.el6
2.5.14-1.Final_redhat_1.1.jbcs.el7
18.0.18-1.redhat_00001.1.el9sso
18.0.18-1.redhat_00001.1.el8sso
18.0.18-1.redhat_00001.1.el7sso
18.0.16-1.redhat_00001.1.el9sso
18.0.16-1.redhat_00001.1.el8sso
18.0.16-1.redhat_00001.1.el7sso
18.0.14-1.redhat_00001.1.el9sso
18.0.14-1.redhat_00001.1.el8sso
18.0.14-1.redhat_00001.1.el7sso
18.0.13-1.redhat_00001.1.el9sso
18.0.13-1.redhat_00001.1.el8sso
18.0.13-1.redhat_00001.1.el7sso
18.0.12-1.redhat_00001.1.el8sso
18.0.12-1.redhat_00001.1.el9sso
18.0.12-1.redhat_00001.1.el7sso
18.0.11-3.redhat_00001.1.el9sso
18.0.11-3.redhat_00001.1.el8sso
18.0.11-3.redhat_00001.1.el7sso
18.0.11-2.redhat_00003.1.el9sso
18.0.11-2.redhat_00003.1.el8sso
18.0.11-2.redhat_00003.1.el7sso
18.0.9-1.redhat_00001.1.el7sso
18.0.9-1.redhat_00001.1.el8sso
18.0.9-1.redhat_00001.1.el9sso
18.0.8-1.redhat_00001.1.el9sso
18.0.8-1.redhat_00001.1.el8sso
18.0.8-1.redhat_00001.1.el7sso
18.0.7-1.redhat_00001.1.el7sso
18.0.7-1.redhat_00001.1.el8sso
18.0.7-1.redhat_00001.1.el9sso
18.0.6-1.redhat_00001.1.el7sso
18.0.6-1.redhat_00001.1.el8sso
18.0.6-1.redhat_00001.1.el9sso
15.0.2-3.redhat_00002.1.el7sso
15.0.2-3.redhat_00002.1.el8sso
9.0.15-1.redhat_00002.1.el8sso
9.0.15-1.redhat_00002.1.el7sso
9.0.15-1.redhat_00002.1.el6sso
9.0.13-1.redhat_00006.1.el8sso
9.0.13-1.redhat_00006.1.el7sso
9.0.13-1.redhat_00006.1.el6sso
9.0.12-1.redhat_00001.1.el8sso
9.0.12-1.redhat_00001.1.el7sso
9.0.12-1.redhat_00001.1.el6sso
9.0.9-1.redhat_00001.1.el7sso
9.0.9-1.redhat_00001.1.el6sso
9.0.5-1.redhat_00001.1.el8sso
9.0.5-1.redhat_00001.1.el7sso
9.0.5-1.redhat_00001.1.el6sso
4.8.20-1.Final_redhat_00001.1.el8sso
4.8.20-1.Final_redhat_00001.1.el7sso
4.8.20-1.Final_redhat_00001.1.el6sso
4.8.18-1.Final_redhat_00001.1.el8sso
4.8.18-1.Final_redhat_00001.1.el7sso
4.8.18-1.Final_redhat_00001.1.el6sso
4.8.13-1.Final_redhat_00001.1.el8sso
4.8.13-1.Final_redhat_00001.1.el6sso
3.4.17-1.Final_redhat_00001.1.jbcs.el6
3.4.17-1.Final_redhat_00001.1.jbcs.el7
18.0.3-1.redhat_00002.1.el7sso
18.0.3-1.redhat_00002.1.el9sso
18.0.3-1.redhat_00002.1.el8sso
18.0.3-1.redhat_00001.1.el7sso
18.0.3-1.redhat_00001.1.el8sso
15.0.8-1.redhat_00001.1.el7sso
15.0.8-1.redhat_00001.1.el8sso
15.0.6-1.redhat_00002.1.el8sso
15.0.6-1.redhat_00002.1.el7sso
15.0.6-1.redhat_00001.1.el8sso
15.0.6-1.redhat_00001.1.el7sso
15.0.4-1.redhat_00003.1.el7sso
15.0.4-1.redhat_00003.1.el8sso
Vulnerabilities (9)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU67936 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-0225 |
CWE-79 | Low | 15.0.8-1.redhat_00001.1.el7sso, 15.0.8-1.redhat_00001.1.el8sso, 18.0.3-1.redhat_00001.1.el7sso, 18.0.3-1.redhat_00001.1.el8sso | 05.10.2022 |
SB2022100527 SB2022100530 SB2022100531 and 6 more |
||
| #VU67935 - Permissions, Privileges, and Access Controls CVE-2022-2668 |
CWE-264 | Low | 15.0.8-1.redhat_00001.1.el7sso, 15.0.8-1.redhat_00001.1.el8sso, 18.0.3-1.redhat_00001.1.el7sso, 18.0.3-1.redhat_00001.1.el8sso | 05.10.2022 |
SB2022100527 SB2022100530 SB2022100531 and 5 more |
||
| #VU67933 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-2256 |
CWE-79 | Low | 15.0.8-1.redhat_00001.1.el7sso, 15.0.8-1.redhat_00001.1.el8sso | 05.10.2022 |
SB2022100527 SB2022100530 SB2022100531 and 2 more |
||
| #VU64037 - Incorrect Authorization CVE-2022-0866 |
CWE-863 | Low | 15.0.8-1.redhat_00001.1.el7sso, 15.0.8-1.redhat_00001.1.el8sso, 18.0.3-1.redhat_00001.1.el7sso, 18.0.3-1.redhat_00001.1.el8sso | 07.06.2022 |
SB2022060718 SB2022060838 SB2022100530 and 6 more |
||
| #VU63159 - Allocation of Resources Without Limits or Throttling CVE-2022-0084 |
CWE-770 | Low | 15.0.8-1.redhat_00001.1.el7sso, 15.0.8-1.redhat_00001.1.el8sso, 18.0.3-1.redhat_00001.1.el7sso, 18.0.3-1.redhat_00001.1.el8sso | 13.05.2022 |
SB2022051310 SB2022051311 SB2022060838 and 12 more |
||
| #VU61937 - Deserialization of Untrusted Data CVE-2021-42392 |
CWE-502 | Critical | 15.0.8-1.redhat_00001.1.el7sso, 15.0.8-1.redhat_00001.1.el8sso, 18.0.3-1.redhat_00001.1.el7sso, 18.0.3-1.redhat_00001.1.el8sso | 06.04.2022 |
SB2022040617 SB2022040619 SB2022042257 and 10 more |
||
| #VU61810 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2021-43797 |
CWE-444 | Medium | 15.0.8-1.redhat_00001.1.el7sso, 15.0.8-1.redhat_00001.1.el8sso, 18.0.3-1.redhat_00001.1.el7sso, 18.0.3-1.redhat_00001.1.el8sso | 02.04.2022 |
SB2021120923 SB2022040202 SB2022042223 and 49 more |
||
| #VU61799 - Out-of-bounds write CVE-2020-36518 |
CWE-787 | Medium | 15.0.8-1.redhat_00001.1.el7sso, 15.0.8-1.redhat_00001.1.el8sso, 18.0.3-1.redhat_00001.1.el7sso, 18.0.3-1.redhat_00001.1.el8sso | 01.04.2022 |
SB2022040113 SB2022040114 SB2022040115 and 147 more |
||
| #VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-45105 |
CWE-835 | Medium | 15.0.6-1.redhat_00001.1.el7sso, 15.0.6-1.redhat_00001.1.el8sso | 18.12.2021 |
SB2021121802 SB2021121903 SB2021122011 and 169 more |