Known vulnerabilities in rh-sso7-keycloak (Red Hat package) - page 4
Vendor:
Red Hat Inc.
Software:
rh-sso7-keycloak (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:rh-sso7-keycloak_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
95
Public exploits:
8
Known exploited (KEV):
1
Breakdown by Severity Chart
18.0.20-1.redhat_00001.1.el7sso
18.0.19-1.redhat_00002.1.el9sso
18.0.19-1.redhat_00002.1.el8sso
18.0.19-1.redhat_00002.1.el7sso
2.5.14-1.Final_redhat_1.1.jbcs.el6
2.5.14-1.Final_redhat_1.1.jbcs.el7
18.0.18-1.redhat_00001.1.el9sso
18.0.18-1.redhat_00001.1.el8sso
18.0.18-1.redhat_00001.1.el7sso
18.0.16-1.redhat_00001.1.el9sso
18.0.16-1.redhat_00001.1.el8sso
18.0.16-1.redhat_00001.1.el7sso
18.0.14-1.redhat_00001.1.el9sso
18.0.14-1.redhat_00001.1.el8sso
18.0.14-1.redhat_00001.1.el7sso
18.0.13-1.redhat_00001.1.el9sso
18.0.13-1.redhat_00001.1.el8sso
18.0.13-1.redhat_00001.1.el7sso
18.0.12-1.redhat_00001.1.el8sso
18.0.12-1.redhat_00001.1.el9sso
18.0.12-1.redhat_00001.1.el7sso
18.0.11-3.redhat_00001.1.el9sso
18.0.11-3.redhat_00001.1.el8sso
18.0.11-3.redhat_00001.1.el7sso
18.0.11-2.redhat_00003.1.el9sso
18.0.11-2.redhat_00003.1.el8sso
18.0.11-2.redhat_00003.1.el7sso
18.0.9-1.redhat_00001.1.el7sso
18.0.9-1.redhat_00001.1.el8sso
18.0.9-1.redhat_00001.1.el9sso
18.0.8-1.redhat_00001.1.el9sso
18.0.8-1.redhat_00001.1.el8sso
18.0.8-1.redhat_00001.1.el7sso
18.0.7-1.redhat_00001.1.el7sso
18.0.7-1.redhat_00001.1.el8sso
18.0.7-1.redhat_00001.1.el9sso
18.0.6-1.redhat_00001.1.el7sso
18.0.6-1.redhat_00001.1.el8sso
18.0.6-1.redhat_00001.1.el9sso
15.0.2-3.redhat_00002.1.el7sso
15.0.2-3.redhat_00002.1.el8sso
9.0.15-1.redhat_00002.1.el8sso
9.0.15-1.redhat_00002.1.el7sso
9.0.15-1.redhat_00002.1.el6sso
9.0.13-1.redhat_00006.1.el8sso
9.0.13-1.redhat_00006.1.el7sso
9.0.13-1.redhat_00006.1.el6sso
9.0.12-1.redhat_00001.1.el8sso
9.0.12-1.redhat_00001.1.el7sso
9.0.12-1.redhat_00001.1.el6sso
9.0.9-1.redhat_00001.1.el7sso
9.0.9-1.redhat_00001.1.el6sso
9.0.5-1.redhat_00001.1.el8sso
9.0.5-1.redhat_00001.1.el7sso
9.0.5-1.redhat_00001.1.el6sso
4.8.20-1.Final_redhat_00001.1.el8sso
4.8.20-1.Final_redhat_00001.1.el7sso
4.8.20-1.Final_redhat_00001.1.el6sso
4.8.18-1.Final_redhat_00001.1.el8sso
4.8.18-1.Final_redhat_00001.1.el7sso
4.8.18-1.Final_redhat_00001.1.el6sso
4.8.13-1.Final_redhat_00001.1.el8sso
4.8.13-1.Final_redhat_00001.1.el6sso
3.4.17-1.Final_redhat_00001.1.jbcs.el6
3.4.17-1.Final_redhat_00001.1.jbcs.el7
18.0.3-1.redhat_00002.1.el7sso
18.0.3-1.redhat_00002.1.el9sso
18.0.3-1.redhat_00002.1.el8sso
18.0.3-1.redhat_00001.1.el7sso
18.0.3-1.redhat_00001.1.el8sso
15.0.8-1.redhat_00001.1.el7sso
15.0.8-1.redhat_00001.1.el8sso
15.0.6-1.redhat_00002.1.el8sso
15.0.6-1.redhat_00002.1.el7sso
15.0.6-1.redhat_00001.1.el8sso
15.0.6-1.redhat_00001.1.el7sso
15.0.4-1.redhat_00003.1.el7sso
15.0.4-1.redhat_00003.1.el8sso
Vulnerabilities (95)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU72725 - Authentication Bypass Using an Alternate Path or Channel CVE-2023-0264 |
CWE-288 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 02.03.2023 |
SB2023030251 SB2023030253 SB2023030255 and 3 more |
||
| #VU72724 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-1438 |
CWE-79 | Low | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 02.03.2023 |
SB2023030250 SB2023030253 SB2023030255 and 3 more |
||
| #VU71139 - Improper Authorization CVE-2023-0091 |
CWE-285 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 12.01.2023 |
SB2023011260 SB2023030253 SB2023030255 and 3 more |
||
| #VU70121 - Incorrect Regular Expression CVE-2022-37603 |
CWE-185 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 12.12.2022 |
SB2022121221 SB2022121222 SB2023010418 and 29 more |
||
| #VU67936 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-0225 |
CWE-79 | Low | 15.0.8-1.redhat_00001.1.el7sso, 15.0.8-1.redhat_00001.1.el8sso, 18.0.3-1.redhat_00001.1.el7sso, 18.0.3-1.redhat_00001.1.el8sso | 05.10.2022 |
SB2022100527 SB2022100530 SB2022100531 and 6 more |
||
| #VU67935 - Permissions, Privileges, and Access Controls CVE-2022-2668 |
CWE-264 | Low | 15.0.8-1.redhat_00001.1.el7sso, 15.0.8-1.redhat_00001.1.el8sso, 18.0.3-1.redhat_00001.1.el7sso, 18.0.3-1.redhat_00001.1.el8sso | 05.10.2022 |
SB2022100527 SB2022100530 SB2022100531 and 5 more |
||
| #VU67933 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-2256 |
CWE-79 | Low | 15.0.8-1.redhat_00001.1.el7sso, 15.0.8-1.redhat_00001.1.el8sso | 05.10.2022 |
SB2022100527 SB2022100530 SB2022100531 and 2 more |
||
| #VU67665 - Resource exhaustion CVE-2022-25857 |
CWE-400 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 27.09.2022 |
SB2022092714 SB2022092728 SB2022100555 and 83 more |
||
| #VU64037 - Incorrect Authorization CVE-2022-0866 |
CWE-863 | Low | 15.0.8-1.redhat_00001.1.el7sso, 15.0.8-1.redhat_00001.1.el8sso, 18.0.3-1.redhat_00001.1.el7sso, 18.0.3-1.redhat_00001.1.el8sso | 07.06.2022 |
SB2022060718 SB2022060838 SB2022100530 and 6 more |
||
| #VU64030 - Resource exhaustion CVE-2021-44906 |
CWE-400 | High | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 07.06.2022 |
SB2022060836 SB2022062103 SB2022062203 and 53 more |
||
| #VU63159 - Allocation of Resources Without Limits or Throttling CVE-2022-0084 |
CWE-770 | Low | 15.0.8-1.redhat_00001.1.el7sso, 15.0.8-1.redhat_00001.1.el8sso, 18.0.3-1.redhat_00001.1.el7sso, 18.0.3-1.redhat_00001.1.el8sso | 13.05.2022 |
SB2022051310 SB2022051311 SB2022060838 and 12 more |
||
| #VU62795 - Missing Authorization CVE-2022-1245 |
CWE-862 | Medium | 15.0.6-1.redhat_00002.1.el7sso, 15.0.6-1.redhat_00002.1.el8sso | 04.05.2022 |
SB2022050415 SB2022050431 SB2022050432 |
||
| #VU61937 - Deserialization of Untrusted Data CVE-2021-42392 |
CWE-502 | Critical | 15.0.8-1.redhat_00001.1.el7sso, 15.0.8-1.redhat_00001.1.el8sso, 18.0.3-1.redhat_00001.1.el7sso, 18.0.3-1.redhat_00001.1.el8sso | 06.04.2022 |
SB2022040617 SB2022040619 SB2022042257 and 10 more |
||
| #VU61810 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2021-43797 |
CWE-444 | Medium | 15.0.8-1.redhat_00001.1.el7sso, 15.0.8-1.redhat_00001.1.el8sso, 18.0.3-1.redhat_00001.1.el7sso, 18.0.3-1.redhat_00001.1.el8sso | 02.04.2022 |
SB2021120923 SB2022040202 SB2022042223 and 50 more |
||
| #VU61799 - Out-of-bounds write CVE-2020-36518 |
CWE-787 | Medium | 15.0.8-1.redhat_00001.1.el7sso, 15.0.8-1.redhat_00001.1.el8sso, 18.0.3-1.redhat_00001.1.el7sso, 18.0.3-1.redhat_00001.1.el8sso | 01.04.2022 |
SB2022040113 SB2022040114 SB2022040115 and 147 more |
||
| #VU59693 - Deserialization of Untrusted Data CVE-2020-9493 |
CWE-502 | High | 15.0.4-1.redhat_00003.1.el7sso, 15.0.4-1.redhat_00003.1.el8sso | 18.01.2022 |
SB2021061626 SB2022011819 SB2022012640 and 62 more |
||
| #VU59692 - Deserialization of Untrusted Data CVE-2022-23302 |
CWE-502 | High | 15.0.4-1.redhat_00003.1.el7sso, 15.0.4-1.redhat_00003.1.el8sso | 18.01.2022 |
SB2022011818 SB2022012640 SB2022012641 and 60 more |
||
| #VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2022-23305 |
CWE-89 | Medium | 15.0.4-1.redhat_00003.1.el7sso, 15.0.4-1.redhat_00003.1.el8sso | 18.01.2022 |
SB2022011818 SB2022012640 SB2022012641 and 94 more |
||
| #VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-45105 |
CWE-835 | Medium | 15.0.6-1.redhat_00001.1.el7sso, 15.0.6-1.redhat_00001.1.el8sso | 18.12.2021 |
SB2021121802 SB2021121903 SB2021122011 and 170 more |
||
| #VU55102 - Resource exhaustion CVE-2021-35065 |
CWE-400 | Medium | 18.0.6-1.redhat_00001.1.el7sso, 18.0.6-1.redhat_00001.1.el8sso, 18.0.6-1.redhat_00001.1.el9sso | 21.07.2021 |
SB2021072101 SB2023020668 SB2023020971 and 24 more |
Showing elements 61 - 80 out of 95