Known vulnerabilities in rh-sso7-keycloak (Red Hat package) - page 3
Vendor:
Red Hat Inc.
Software:
rh-sso7-keycloak (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:rh-sso7-keycloak_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
95
Public exploits:
8
Known exploited (KEV):
1
Breakdown by Severity Chart
18.0.20-1.redhat_00001.1.el7sso
18.0.19-1.redhat_00002.1.el9sso
18.0.19-1.redhat_00002.1.el8sso
18.0.19-1.redhat_00002.1.el7sso
2.5.14-1.Final_redhat_1.1.jbcs.el6
2.5.14-1.Final_redhat_1.1.jbcs.el7
18.0.18-1.redhat_00001.1.el9sso
18.0.18-1.redhat_00001.1.el8sso
18.0.18-1.redhat_00001.1.el7sso
18.0.16-1.redhat_00001.1.el9sso
18.0.16-1.redhat_00001.1.el8sso
18.0.16-1.redhat_00001.1.el7sso
18.0.14-1.redhat_00001.1.el9sso
18.0.14-1.redhat_00001.1.el8sso
18.0.14-1.redhat_00001.1.el7sso
18.0.13-1.redhat_00001.1.el9sso
18.0.13-1.redhat_00001.1.el8sso
18.0.13-1.redhat_00001.1.el7sso
18.0.12-1.redhat_00001.1.el8sso
18.0.12-1.redhat_00001.1.el9sso
18.0.12-1.redhat_00001.1.el7sso
18.0.11-3.redhat_00001.1.el9sso
18.0.11-3.redhat_00001.1.el8sso
18.0.11-3.redhat_00001.1.el7sso
18.0.11-2.redhat_00003.1.el9sso
18.0.11-2.redhat_00003.1.el8sso
18.0.11-2.redhat_00003.1.el7sso
18.0.9-1.redhat_00001.1.el7sso
18.0.9-1.redhat_00001.1.el8sso
18.0.9-1.redhat_00001.1.el9sso
18.0.8-1.redhat_00001.1.el9sso
18.0.8-1.redhat_00001.1.el8sso
18.0.8-1.redhat_00001.1.el7sso
18.0.7-1.redhat_00001.1.el7sso
18.0.7-1.redhat_00001.1.el8sso
18.0.7-1.redhat_00001.1.el9sso
18.0.6-1.redhat_00001.1.el7sso
18.0.6-1.redhat_00001.1.el8sso
18.0.6-1.redhat_00001.1.el9sso
15.0.2-3.redhat_00002.1.el7sso
15.0.2-3.redhat_00002.1.el8sso
9.0.15-1.redhat_00002.1.el8sso
9.0.15-1.redhat_00002.1.el7sso
9.0.15-1.redhat_00002.1.el6sso
9.0.13-1.redhat_00006.1.el8sso
9.0.13-1.redhat_00006.1.el7sso
9.0.13-1.redhat_00006.1.el6sso
9.0.12-1.redhat_00001.1.el8sso
9.0.12-1.redhat_00001.1.el7sso
9.0.12-1.redhat_00001.1.el6sso
9.0.9-1.redhat_00001.1.el7sso
9.0.9-1.redhat_00001.1.el6sso
9.0.5-1.redhat_00001.1.el8sso
9.0.5-1.redhat_00001.1.el7sso
9.0.5-1.redhat_00001.1.el6sso
4.8.20-1.Final_redhat_00001.1.el8sso
4.8.20-1.Final_redhat_00001.1.el7sso
4.8.20-1.Final_redhat_00001.1.el6sso
4.8.18-1.Final_redhat_00001.1.el8sso
4.8.18-1.Final_redhat_00001.1.el7sso
4.8.18-1.Final_redhat_00001.1.el6sso
4.8.13-1.Final_redhat_00001.1.el8sso
4.8.13-1.Final_redhat_00001.1.el6sso
3.4.17-1.Final_redhat_00001.1.jbcs.el6
3.4.17-1.Final_redhat_00001.1.jbcs.el7
18.0.3-1.redhat_00002.1.el7sso
18.0.3-1.redhat_00002.1.el9sso
18.0.3-1.redhat_00002.1.el8sso
18.0.3-1.redhat_00001.1.el7sso
18.0.3-1.redhat_00001.1.el8sso
15.0.8-1.redhat_00001.1.el7sso
15.0.8-1.redhat_00001.1.el8sso
15.0.6-1.redhat_00002.1.el8sso
15.0.6-1.redhat_00002.1.el7sso
15.0.6-1.redhat_00001.1.el8sso
15.0.6-1.redhat_00001.1.el7sso
15.0.4-1.redhat_00003.1.el7sso
15.0.4-1.redhat_00003.1.el8sso
Vulnerabilities (95)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU72723 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-4137 |
CWE-79 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 02.03.2023 |
SB2023030250 SB2023030255 SB2023030256 and 2 more |
||
| #VU72722 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-1274 |
CWE-79 | Low | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 02.03.2023 |
SB2023030250 SB2023030253 SB2023030255 and 3 more |
||
| #VU70444 - Server-Side Request Forgery (SSRF) CVE-2022-46364 |
CWE-918 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 20.12.2022 |
SB2022122009 SB2023011329 SB2023011707 and 67 more |
||
| #VU70443 - Exposure of sensitive information to an unauthorized actor CVE-2022-46363 |
CWE-200 | Low | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 20.12.2022 |
SB2022122009 SB2023011707 SB2023012719 and 22 more |
||
| #VU70385 - Deserialization of Untrusted Data CVE-2022-1471 |
CWE-502 | High | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 15.12.2022 |
SB2022121539 SB2022121540 SB2022121928 and 124 more |
||
| #VU70169 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-3782 |
CWE-22 | Medium | 18.0.3-1.redhat_00002.1.el7sso, 18.0.3-1.redhat_00002.1.el8sso, 18.0.3-1.redhat_00002.1.el9sso, 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 13.12.2022 |
SB2022121342 SB2022121346 SB2022121348 and 14 more |
||
| #VU70166 - Insufficient Session Expiration CVE-2022-3916 |
CWE-613 | Low | 18.0.3-1.redhat_00002.1.el7sso, 18.0.3-1.redhat_00002.1.el8sso, 18.0.3-1.redhat_00002.1.el9sso, 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 13.12.2022 |
SB2022121340 SB2022121346 SB2022121348 and 7 more |
||
| #VU69919 - Resource Management Errors CVE-2022-2764 |
CWE-399 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 06.12.2022 |
SB2022120605 SB2022120615 SB2022120616 and 7 more |
||
| #VU69674 - Resource exhaustion CVE-2022-40150 |
CWE-400 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 29.11.2022 |
SB2022112909 SB2022112941 SB2022121101 and 46 more |
||
| #VU69673 - Out-of-bounds write CVE-2022-40149 |
CWE-787 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 29.11.2022 |
SB2022112909 SB2022112941 SB2022121101 and 41 more |
||
| #VU68635 - Deserialization of Untrusted Data CVE-2022-42003 |
CWE-502 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 25.10.2022 |
SB2022102509 SB2022102510 SB2022103117 and 208 more |
||
| #VU67666 - Stack-based buffer overflow CVE-2022-38749 |
CWE-121 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 27.09.2022 |
SB2022092714 SB2022092728 SB2022100555 and 51 more |
||
| #VU67663 - Out-of-bounds write CVE-2022-38751 |
CWE-787 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 27.09.2022 |
SB2022092714 SB2022092728 SB2022100555 and 50 more |
||
| #VU65835 - Incorrect Regular Expression CVE-2022-31129 |
CWE-185 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 27.07.2022 |
SB2022072729 SB2022072901 SB2022081048 and 102 more |
||
| #VU62463 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-24785 |
CWE-22 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 20.04.2022 |
SB2022042016 SB2022042017 SB2022060317 and 67 more |
||
| #VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11023 |
CWE-79 | Low | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 05.05.2020 |
SB2020042126 SB2020052033 SB2020052103 and 180 more |
||
| #VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11022 |
CWE-79 | Low | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 21.04.2020 |
SB2020042126 SB2020052033 SB2020052103 and 181 more |
||
| #VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2019-11358 |
CWE-1321 | Low | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 28.03.2019 |
SB2019032804 SB2019041026 SB2019041801 and 155 more |
||
| #VU13902 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-14042 |
CWE-79 | Low | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 18.07.2018 |
SB2018071803 SB2020093090 SB2020110508 and 22 more |
||
| #VU13901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-14040 |
CWE-79 | Low | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 17.07.2018 |
SB2018071803 SB2019031501 SB2020093090 and 24 more |
Showing elements 41 - 60 out of 95