Known vulnerabilities in rh-sso7-keycloak (Red Hat package) - page 2
Vendor:
Red Hat Inc.
Software:
rh-sso7-keycloak (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:rh-sso7-keycloak_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
95
Public exploits:
8
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
18.0.19-1.redhat_00002.1.el9sso
18.0.19-1.redhat_00002.1.el8sso
18.0.19-1.redhat_00002.1.el7sso
2.5.14-1.Final_redhat_1.1.jbcs.el6
2.5.14-1.Final_redhat_1.1.jbcs.el7
18.0.18-1.redhat_00001.1.el9sso
18.0.18-1.redhat_00001.1.el8sso
18.0.18-1.redhat_00001.1.el7sso
18.0.16-1.redhat_00001.1.el9sso
18.0.16-1.redhat_00001.1.el8sso
18.0.16-1.redhat_00001.1.el7sso
18.0.14-1.redhat_00001.1.el9sso
18.0.14-1.redhat_00001.1.el8sso
18.0.14-1.redhat_00001.1.el7sso
18.0.13-1.redhat_00001.1.el9sso
18.0.13-1.redhat_00001.1.el8sso
18.0.13-1.redhat_00001.1.el7sso
18.0.12-1.redhat_00001.1.el8sso
18.0.12-1.redhat_00001.1.el9sso
18.0.12-1.redhat_00001.1.el7sso
18.0.11-3.redhat_00001.1.el9sso
18.0.11-3.redhat_00001.1.el8sso
18.0.11-3.redhat_00001.1.el7sso
18.0.11-2.redhat_00003.1.el9sso
18.0.11-2.redhat_00003.1.el8sso
18.0.11-2.redhat_00003.1.el7sso
18.0.9-1.redhat_00001.1.el7sso
18.0.9-1.redhat_00001.1.el8sso
18.0.9-1.redhat_00001.1.el9sso
18.0.8-1.redhat_00001.1.el9sso
18.0.8-1.redhat_00001.1.el8sso
18.0.8-1.redhat_00001.1.el7sso
18.0.7-1.redhat_00001.1.el7sso
18.0.7-1.redhat_00001.1.el8sso
18.0.7-1.redhat_00001.1.el9sso
18.0.6-1.redhat_00001.1.el7sso
18.0.6-1.redhat_00001.1.el8sso
18.0.6-1.redhat_00001.1.el9sso
15.0.2-3.redhat_00002.1.el7sso
15.0.2-3.redhat_00002.1.el8sso
9.0.15-1.redhat_00002.1.el8sso
9.0.15-1.redhat_00002.1.el7sso
9.0.15-1.redhat_00002.1.el6sso
9.0.13-1.redhat_00006.1.el8sso
9.0.13-1.redhat_00006.1.el7sso
9.0.13-1.redhat_00006.1.el6sso
9.0.12-1.redhat_00001.1.el8sso
9.0.12-1.redhat_00001.1.el7sso
9.0.12-1.redhat_00001.1.el6sso
9.0.9-1.redhat_00001.1.el7sso
9.0.9-1.redhat_00001.1.el6sso
9.0.5-1.redhat_00001.1.el8sso
9.0.5-1.redhat_00001.1.el7sso
9.0.5-1.redhat_00001.1.el6sso
4.8.20-1.Final_redhat_00001.1.el8sso
4.8.20-1.Final_redhat_00001.1.el7sso
4.8.20-1.Final_redhat_00001.1.el6sso
4.8.18-1.Final_redhat_00001.1.el8sso
4.8.18-1.Final_redhat_00001.1.el7sso
4.8.18-1.Final_redhat_00001.1.el6sso
4.8.13-1.Final_redhat_00001.1.el8sso
4.8.13-1.Final_redhat_00001.1.el6sso
3.4.17-1.Final_redhat_00001.1.jbcs.el6
3.4.17-1.Final_redhat_00001.1.jbcs.el7
18.0.3-1.redhat_00002.1.el7sso
18.0.3-1.redhat_00002.1.el9sso
18.0.3-1.redhat_00002.1.el8sso
18.0.3-1.redhat_00001.1.el7sso
18.0.3-1.redhat_00001.1.el8sso
15.0.8-1.redhat_00001.1.el7sso
15.0.8-1.redhat_00001.1.el8sso
15.0.6-1.redhat_00002.1.el8sso
15.0.6-1.redhat_00002.1.el7sso
15.0.6-1.redhat_00001.1.el8sso
15.0.6-1.redhat_00001.1.el7sso
15.0.4-1.redhat_00003.1.el7sso
15.0.4-1.redhat_00003.1.el8sso
Vulnerabilities (95)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU79114 - Resource exhaustion CVE-2023-3223 |
CWE-400 | Medium | 18.0.9-1.redhat_00001.1.el7sso, 18.0.9-1.redhat_00001.1.el8sso, 18.0.9-1.redhat_00001.1.el9sso | 08.08.2023 |
SB2023080810 SB2023080815 SB2023080816 and 12 more |
||
| #VU77767 - Authentication Bypass by Spoofing CVE-2023-2585 |
CWE-290 | Medium | 18.0.8-1.redhat_00001.1.el7sso, 18.0.8-1.redhat_00001.1.el8sso, 18.0.8-1.redhat_00001.1.el9sso | 28.06.2023 |
SB2023062807 SB2023062847 SB2023062848 and 3 more |
||
| #VU77766 - Improper Certificate Validation CVE-2023-2422 |
CWE-295 | Medium | 18.0.8-1.redhat_00001.1.el7sso, 18.0.8-1.redhat_00001.1.el8sso, 18.0.8-1.redhat_00001.1.el9sso | 28.06.2023 |
SB2023062807 SB2023062847 SB2023062848 and 2 more |
||
| #VU77752 - Improper Certificate Validation CVE-2023-1664 |
CWE-295 | Medium | 18.0.8-1.redhat_00001.1.el7sso, 18.0.8-1.redhat_00001.1.el8sso, 18.0.8-1.redhat_00001.1.el9sso | 28.06.2023 |
SB2023062807 SB2023062847 SB2023062848 and 4 more |
||
| #VU77750 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-4361 |
CWE-79 | Medium | 18.0.8-1.redhat_00001.1.el7sso, 18.0.8-1.redhat_00001.1.el8sso, 18.0.8-1.redhat_00001.1.el9sso | 28.06.2023 |
SB2023062807 SB2023062847 SB2023062848 and 2 more |
||
| #VU75431 - Uncontrolled Recursion CVE-2023-1436 |
CWE-674 | Medium | 18.0.9-1.redhat_00001.1.el7sso, 18.0.9-1.redhat_00001.1.el8sso, 18.0.9-1.redhat_00001.1.el9sso | 24.04.2023 |
SB2023042409 SB2023042411 SB2023050111 and 86 more |
||
| #VU74182 - Improper Certificate Validation CVE-2022-4492 |
CWE-295 | Medium | 18.0.7-1.redhat_00001.1.el7sso, 18.0.7-1.redhat_00001.1.el8sso, 18.0.7-1.redhat_00001.1.el9sso | 30.03.2023 |
SB2023033003 SB2023033004 SB2023033005 and 13 more |
||
| #VU73219 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2023-1108 |
CWE-835 | Medium | 18.0.8-1.redhat_00001.1.el7sso, 18.0.8-1.redhat_00001.1.el8sso, 18.0.8-1.redhat_00001.1.el9sso | 10.03.2023 |
SB2023031005 SB2023031008 SB2023031009 and 15 more |
||
| #VU72323 - Improper Certificate Validation CVE-2021-0341 |
CWE-295 | Medium | 18.0.7-1.redhat_00001.1.el7sso, 18.0.7-1.redhat_00001.1.el8sso, 18.0.7-1.redhat_00001.1.el9sso | 16.02.2023 |
SB2023021628 SB2023051043 SB2023051044 and 14 more |
||
| #VU72075 - Insecure Temporary File CVE-2023-0482 |
CWE-377 | Low | 18.0.7-1.redhat_00001.1.el7sso, 18.0.7-1.redhat_00001.1.el8sso, 18.0.7-1.redhat_00001.1.el9sso | 08.02.2023 |
SB2023020877 SB2023033003 SB2023033004 and 36 more |
||
| #VU71109 - Out-of-bounds write CVE-2022-45693 |
CWE-787 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 11.01.2023 |
SB2023011159 SB2023011160 SB2023013112 and 45 more |
||
| #VU70797 - Exposure of sensitive information to an unauthorized actor CVE-2022-45787 |
CWE-200 | Low | 18.0.7-1.redhat_00001.1.el7sso, 18.0.7-1.redhat_00001.1.el8sso, 18.0.7-1.redhat_00001.1.el9sso | 09.01.2023 |
SB2023010909 SB2023020878 SB2023031107 and 34 more |
||
| #VU70530 - Deserialization of Untrusted Data CVE-2022-45047 |
CWE-502 | High | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 28.12.2022 |
SB2022122828 SB2022122920 SB2023011148 and 49 more |
||
| #VU70524 - Out-of-bounds write CVE-2022-41854 |
CWE-787 | Medium | 18.0.7-1.redhat_00001.1.el7sso, 18.0.7-1.redhat_00001.1.el8sso, 18.0.7-1.redhat_00001.1.el9sso | 28.12.2022 |
SB2022122813 SB2022122926 SB2023010417 and 52 more |
||
| #VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-41881 |
CWE-835 | Medium | 18.0.7-1.redhat_00001.1.el7sso, 18.0.7-1.redhat_00001.1.el8sso, 18.0.7-1.redhat_00001.1.el9sso | 12.12.2022 |
SB2022121215 SB2023011210 SB2023011757 and 74 more |
||
| #VU68832 - Resource exhaustion CVE-2022-42004 |
CWE-400 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 31.10.2022 |
SB2022103116 SB2022103117 SB2022111404 and 122 more |
||
| #VU68635 - Deserialization of Untrusted Data CVE-2022-42003 |
CWE-502 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 25.10.2022 |
SB2022102509 SB2022102510 SB2022103117 and 208 more |
||
| #VU67664 - Stack-based buffer overflow CVE-2022-38752 |
CWE-121 | Medium | 18.0.7-1.redhat_00001.1.el7sso, 18.0.7-1.redhat_00001.1.el8sso, 18.0.7-1.redhat_00001.1.el9sso | 27.09.2022 |
SB2022092715 SB2022092728 SB2022100555 and 66 more |
||
| #VU59148 - Deserialization of Untrusted Data CVE-2021-46877 |
CWE-502 | Medium | 18.0.9-1.redhat_00001.1.el7sso, 18.0.9-1.redhat_00001.1.el8sso, 18.0.9-1.redhat_00001.1.el9sso | 03.01.2022 |
SB2022010326 SB2022010327 SB2022062734 and 37 more |
||
| #VU13901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-14040 |
CWE-79 | Low | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 17.07.2018 |
SB2018071803 SB2019031501 SB2020093090 and 24 more |
Showing elements 21 - 40 out of 95