Known vulnerabilities in rh-sso7-keycloak (Red Hat package) - page 3
Vendor:
Red Hat Inc.
Software:
rh-sso7-keycloak (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:rh-sso7-keycloak_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
95
Public exploits:
8
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
18.0.19-1.redhat_00002.1.el9sso
18.0.19-1.redhat_00002.1.el8sso
18.0.19-1.redhat_00002.1.el7sso
2.5.14-1.Final_redhat_1.1.jbcs.el6
2.5.14-1.Final_redhat_1.1.jbcs.el7
18.0.18-1.redhat_00001.1.el9sso
18.0.18-1.redhat_00001.1.el8sso
18.0.18-1.redhat_00001.1.el7sso
18.0.16-1.redhat_00001.1.el9sso
18.0.16-1.redhat_00001.1.el8sso
18.0.16-1.redhat_00001.1.el7sso
18.0.14-1.redhat_00001.1.el9sso
18.0.14-1.redhat_00001.1.el8sso
18.0.14-1.redhat_00001.1.el7sso
18.0.13-1.redhat_00001.1.el9sso
18.0.13-1.redhat_00001.1.el8sso
18.0.13-1.redhat_00001.1.el7sso
18.0.12-1.redhat_00001.1.el8sso
18.0.12-1.redhat_00001.1.el9sso
18.0.12-1.redhat_00001.1.el7sso
18.0.11-3.redhat_00001.1.el9sso
18.0.11-3.redhat_00001.1.el8sso
18.0.11-3.redhat_00001.1.el7sso
18.0.11-2.redhat_00003.1.el9sso
18.0.11-2.redhat_00003.1.el8sso
18.0.11-2.redhat_00003.1.el7sso
18.0.9-1.redhat_00001.1.el7sso
18.0.9-1.redhat_00001.1.el8sso
18.0.9-1.redhat_00001.1.el9sso
18.0.8-1.redhat_00001.1.el9sso
18.0.8-1.redhat_00001.1.el8sso
18.0.8-1.redhat_00001.1.el7sso
18.0.7-1.redhat_00001.1.el7sso
18.0.7-1.redhat_00001.1.el8sso
18.0.7-1.redhat_00001.1.el9sso
18.0.6-1.redhat_00001.1.el7sso
18.0.6-1.redhat_00001.1.el8sso
18.0.6-1.redhat_00001.1.el9sso
15.0.2-3.redhat_00002.1.el7sso
15.0.2-3.redhat_00002.1.el8sso
9.0.15-1.redhat_00002.1.el8sso
9.0.15-1.redhat_00002.1.el7sso
9.0.15-1.redhat_00002.1.el6sso
9.0.13-1.redhat_00006.1.el8sso
9.0.13-1.redhat_00006.1.el7sso
9.0.13-1.redhat_00006.1.el6sso
9.0.12-1.redhat_00001.1.el8sso
9.0.12-1.redhat_00001.1.el7sso
9.0.12-1.redhat_00001.1.el6sso
9.0.9-1.redhat_00001.1.el7sso
9.0.9-1.redhat_00001.1.el6sso
9.0.5-1.redhat_00001.1.el8sso
9.0.5-1.redhat_00001.1.el7sso
9.0.5-1.redhat_00001.1.el6sso
4.8.20-1.Final_redhat_00001.1.el8sso
4.8.20-1.Final_redhat_00001.1.el7sso
4.8.20-1.Final_redhat_00001.1.el6sso
4.8.18-1.Final_redhat_00001.1.el8sso
4.8.18-1.Final_redhat_00001.1.el7sso
4.8.18-1.Final_redhat_00001.1.el6sso
4.8.13-1.Final_redhat_00001.1.el8sso
4.8.13-1.Final_redhat_00001.1.el6sso
3.4.17-1.Final_redhat_00001.1.jbcs.el6
3.4.17-1.Final_redhat_00001.1.jbcs.el7
18.0.3-1.redhat_00002.1.el7sso
18.0.3-1.redhat_00002.1.el9sso
18.0.3-1.redhat_00002.1.el8sso
18.0.3-1.redhat_00001.1.el7sso
18.0.3-1.redhat_00001.1.el8sso
15.0.8-1.redhat_00001.1.el7sso
15.0.8-1.redhat_00001.1.el8sso
15.0.6-1.redhat_00002.1.el8sso
15.0.6-1.redhat_00002.1.el7sso
15.0.6-1.redhat_00001.1.el8sso
15.0.6-1.redhat_00001.1.el7sso
15.0.4-1.redhat_00003.1.el7sso
15.0.4-1.redhat_00003.1.el8sso
Vulnerabilities (95)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU72725 - Authentication Bypass Using an Alternate Path or Channel CVE-2023-0264 |
CWE-288 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 02.03.2023 |
SB2023030251 SB2023030253 SB2023030255 and 3 more |
||
| #VU72724 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-1438 |
CWE-79 | Low | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 02.03.2023 |
SB2023030250 SB2023030253 SB2023030255 and 3 more |
||
| #VU72723 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-4137 |
CWE-79 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 02.03.2023 |
SB2023030250 SB2023030255 SB2023030256 and 2 more |
||
| #VU71577 - Improper Control of Generation of Code ('Code Injection') CVE-2022-46175 |
CWE-94 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 26.01.2023 |
SB2023012644 SB2023012645 SB2023013117 and 44 more |
||
| #VU71139 - Improper Authorization CVE-2023-0091 |
CWE-285 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 12.01.2023 |
SB2023011260 SB2023030253 SB2023030255 and 3 more |
||
| #VU70444 - Server-Side Request Forgery (SSRF) CVE-2022-46364 |
CWE-918 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 20.12.2022 |
SB2022122009 SB2023011329 SB2023011707 and 67 more |
||
| #VU70443 - Exposure of sensitive information to an unauthorized actor CVE-2022-46363 |
CWE-200 | Low | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 20.12.2022 |
SB2022122009 SB2023011707 SB2023012719 and 22 more |
||
| #VU70385 - Deserialization of Untrusted Data CVE-2022-1471 |
CWE-502 | High | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 15.12.2022 |
SB2022121539 SB2022121540 SB2022121928 and 124 more |
||
| #VU70121 - Incorrect Regular Expression CVE-2022-37603 |
CWE-185 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 12.12.2022 |
SB2022121221 SB2022121222 SB2023010418 and 29 more |
||
| #VU69919 - Resource Management Errors CVE-2022-2764 |
CWE-399 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 06.12.2022 |
SB2022120605 SB2022120615 SB2022120616 and 7 more |
||
| #VU69674 - Resource exhaustion CVE-2022-40150 |
CWE-400 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 29.11.2022 |
SB2022112909 SB2022112941 SB2022121101 and 46 more |
||
| #VU69673 - Out-of-bounds write CVE-2022-40149 |
CWE-787 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 29.11.2022 |
SB2022112909 SB2022112941 SB2022121101 and 41 more |
||
| #VU67668 - Stack-based buffer overflow CVE-2022-38750 |
CWE-121 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 27.09.2022 |
SB2022092714 SB2022092728 SB2022100555 and 50 more |
||
| #VU67666 - Stack-based buffer overflow CVE-2022-38749 |
CWE-121 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 27.09.2022 |
SB2022092714 SB2022092728 SB2022100555 and 51 more |
||
| #VU67665 - Resource exhaustion CVE-2022-25857 |
CWE-400 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 27.09.2022 |
SB2022092714 SB2022092728 SB2022100555 and 83 more |
||
| #VU67663 - Out-of-bounds write CVE-2022-38751 |
CWE-787 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 27.09.2022 |
SB2022092714 SB2022092728 SB2022100555 and 50 more |
||
| #VU64030 - Resource exhaustion CVE-2021-44906 |
CWE-400 | High | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 07.06.2022 |
SB2022060836 SB2022062103 SB2022062203 and 53 more |
||
| #VU62463 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-24785 |
CWE-22 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 20.04.2022 |
SB2022042016 SB2022042017 SB2022060317 and 65 more |
||
| #VU55102 - Resource exhaustion CVE-2021-35065 |
CWE-400 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 21.07.2021 |
SB2021072101 SB2023020668 SB2023020971 and 24 more |
||
| #VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11023 |
CWE-79 | Low | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 05.05.2020 |
SB2020042126 SB2020052033 SB2020052103 and 180 more |
Showing elements 41 - 60 out of 95