Known vulnerabilities in rh-sso7-keycloak (Red Hat package) - page 4

Vendor: Red Hat Inc.
Software: rh-sso7-keycloak (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:rh-sso7-keycloak_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 95
Public exploits: 8
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting rh-sso7-keycloak (Red Hat package) rh-sso7-keycloak (Red Hat package) is affected by 95 known vulnerabilities: 1 critical, 5 high, 58 medium, 31 low Critical High Medium Low

Vulnerabilities (95)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72722 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-1274		 CWE-79 Low
No
No
 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso 02.03.2023 SB2023030250
SB2023030253
SB2023030255
and 3 more
#VU70169 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-3782		 CWE-22 Medium
No
No
 18.0.3-1.redhat_00002.1.el7sso, 18.0.3-1.redhat_00002.1.el8sso, 18.0.3-1.redhat_00002.1.el9sso, 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso 13.12.2022 SB2022121342
SB2022121346
SB2022121348
and 14 more
#VU70166 - Insufficient Session Expiration
CVE-2022-3916		 CWE-613 Low
No
No
 18.0.3-1.redhat_00002.1.el7sso, 18.0.3-1.redhat_00002.1.el8sso, 18.0.3-1.redhat_00002.1.el9sso, 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso 13.12.2022 SB2022121340
SB2022121346
SB2022121348
and 7 more
#VU67936 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-0225		 CWE-79 Low
No
No
 15.0.8-1.redhat_00001.1.el7sso, 15.0.8-1.redhat_00001.1.el8sso, 18.0.3-1.redhat_00001.1.el7sso, 18.0.3-1.redhat_00001.1.el8sso 05.10.2022 SB2022100527
SB2022100530
SB2022100531
and 6 more
#VU67935 - Permissions, Privileges, and Access Controls
CVE-2022-2668		 CWE-264 Low
No
No
 15.0.8-1.redhat_00001.1.el7sso, 15.0.8-1.redhat_00001.1.el8sso, 18.0.3-1.redhat_00001.1.el7sso, 18.0.3-1.redhat_00001.1.el8sso 05.10.2022 SB2022100527
SB2022100530
SB2022100531
and 5 more
#VU67933 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-2256		 CWE-79 Low
No
No
 15.0.8-1.redhat_00001.1.el7sso, 15.0.8-1.redhat_00001.1.el8sso 05.10.2022 SB2022100527
SB2022100530
SB2022100531
and 2 more
#VU65835 - Incorrect Regular Expression
CVE-2022-31129		 CWE-185 Medium
No
No
 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU64037 - Incorrect Authorization
CVE-2022-0866		 CWE-863 Low
No
No
 15.0.8-1.redhat_00001.1.el7sso, 15.0.8-1.redhat_00001.1.el8sso, 18.0.3-1.redhat_00001.1.el7sso, 18.0.3-1.redhat_00001.1.el8sso 07.06.2022 SB2022060718
SB2022060838
SB2022100530
and 6 more
#VU63159 - Allocation of Resources Without Limits or Throttling
CVE-2022-0084		 CWE-770 Low
No
No
 15.0.8-1.redhat_00001.1.el7sso, 15.0.8-1.redhat_00001.1.el8sso, 18.0.3-1.redhat_00001.1.el7sso, 18.0.3-1.redhat_00001.1.el8sso 13.05.2022 SB2022051310
SB2022051311
SB2022060838
and 12 more
#VU62795 - Missing Authorization
CVE-2022-1245		 CWE-862 Medium
No
No
 15.0.6-1.redhat_00002.1.el7sso, 15.0.6-1.redhat_00002.1.el8sso 04.05.2022 SB2022050415
SB2022050431
SB2022050432
#VU61937 - Deserialization of Untrusted Data
CVE-2021-42392		 CWE-502 Critical
Available
No
 15.0.8-1.redhat_00001.1.el7sso, 15.0.8-1.redhat_00001.1.el8sso, 18.0.3-1.redhat_00001.1.el7sso, 18.0.3-1.redhat_00001.1.el8sso 06.04.2022 SB2022040617
SB2022040619
SB2022042257
and 10 more
#VU61810 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-43797		 CWE-444 Medium
No
No
 15.0.8-1.redhat_00001.1.el7sso, 15.0.8-1.redhat_00001.1.el8sso, 18.0.3-1.redhat_00001.1.el7sso, 18.0.3-1.redhat_00001.1.el8sso 02.04.2022 SB2021120923
SB2022040202
SB2022042223
and 49 more
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 15.0.8-1.redhat_00001.1.el7sso, 15.0.8-1.redhat_00001.1.el8sso, 18.0.3-1.redhat_00001.1.el7sso, 18.0.3-1.redhat_00001.1.el8sso 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU60243 - Resource Management Errors
CVE-2021-3859		 CWE-399 Medium
No
No
 15.0.4-1.redhat_00003.1.el7sso, 15.0.4-1.redhat_00003.1.el8sso 02.02.2022 SB2022020210
SB2022020326
SB2022020327
and 4 more
#VU59693 - Deserialization of Untrusted Data
CVE-2020-9493		 CWE-502 High
No
No
 15.0.4-1.redhat_00003.1.el7sso, 15.0.4-1.redhat_00003.1.el8sso 18.01.2022 SB2021061626
SB2022011819
SB2022012640
and 62 more
#VU59692 - Deserialization of Untrusted Data
CVE-2022-23302		 CWE-502 High
No
No
 15.0.4-1.redhat_00003.1.el7sso, 15.0.4-1.redhat_00003.1.el8sso 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 60 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105		 CWE-835 Medium
Available
No
 15.0.6-1.redhat_00001.1.el7sso, 15.0.6-1.redhat_00001.1.el8sso 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 169 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358		 CWE-1321 Low
Available
No
 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more
#VU13902 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14042		 CWE-79 Low
No
No
 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso 18.07.2018 SB2018071803
SB2020093090
SB2020110508
and 22 more


Showing elements 61 - 80 out of 95