Known vulnerabilities in rh-sso7-keycloak (Red Hat package) - page 5

Vendor: Red Hat Inc.
Software: rh-sso7-keycloak (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:rh-sso7-keycloak_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 95
Public exploits: 8
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting rh-sso7-keycloak (Red Hat package) rh-sso7-keycloak (Red Hat package) is affected by 95 known vulnerabilities: 1 critical, 5 high, 58 medium, 31 low Critical High Medium Low

Vulnerabilities (95)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93233 - Improper input validation
CVE-2017-12197		 CWE-20 Low
No
No
 2.5.14-1.Final_redhat_1.1.jbcs.el6, 2.5.14-1.Final_redhat_1.1.jbcs.el7 25.06.2024 SB2021022238
SB2017101734
SB2017101735
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305		 CWE-89 Medium
No
No
 15.0.4-1.redhat_00003.1.el7sso, 15.0.4-1.redhat_00003.1.el8sso 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 94 more
#VU59083 - Improper Access Control
CVE-2021-4133		 CWE-284 Low
No
No
 15.0.2-3.redhat_00002.1.el7sso 22.12.2021 SB2021122206
SB2022012032
SB2022122807
and 2 more
#VU58977 - Deserialization of Untrusted Data
CVE-2021-4104		 CWE-502 Medium
No
No
 15.0.4-1.redhat_00003.1.el7sso, 15.0.4-1.redhat_00003.1.el8sso 15.12.2021 SB2021121507
SB2021121647
SB2021121720
and 119 more
#VU53530 - Insufficient Session Expiration
CVE-2021-3461		 CWE-613 Low
No
No
 9.0.13-1.redhat_00006.1.el6sso, 9.0.13-1.redhat_00006.1.el7sso, 9.0.13-1.redhat_00006.1.el8sso 25.05.2021 SB2021052530
SB2021060137
SB2021052053
and 3 more
#VU53529 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-3424		 CWE-451 Medium
No
No
 9.0.13-1.redhat_00006.1.el6sso, 9.0.13-1.redhat_00006.1.el7sso, 9.0.13-1.redhat_00006.1.el8sso 25.05.2021 SB2021052530
SB2021052053
SB2021052054
and 2 more
#VU49113 - Authentication Bypass by Capture-replay
CVE-2020-14302		 CWE-294 Medium
No
No
 9.0.12-1.redhat_00001.1.el6sso, 9.0.12-1.redhat_00001.1.el7sso, 9.0.12-1.redhat_00001.1.el8sso 15.12.2020 SB2020122131
SB2021032320
SB2021032321
and 2 more
#VU47049 - Allocation of Resources Without Limits or Throttling
CVE-2020-10758		 CWE-770 Medium
No
No
 9.0.5-1.redhat_00001.1.el6sso, 9.0.5-1.redhat_00001.1.el7sso, 9.0.5-1.redhat_00001.1.el8sso 16.09.2020 SB2020092408
SB2020081828
SB2020081829
and 1 more
#VU29032 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7676		 CWE-79 Low
No
No
 9.0.12-1.redhat_00001.1.el6sso, 9.0.12-1.redhat_00001.1.el7sso, 9.0.12-1.redhat_00001.1.el8sso 16.06.2020 SB2020061604
SB2021072628
SB2021072629
and 19 more
#VU27523 - Exposure of sensitive information to an unauthorized actor
CVE-2020-1744		 CWE-200 Medium
No
No
 4.8.18-1.Final_redhat_00001.1.el6sso, 4.8.18-1.Final_redhat_00001.1.el7sso, 4.8.18-1.Final_redhat_00001.1.el8sso 05.05.2020 SB2020050503
SB2020032330
SB2020032331
and 2 more
#VU47487 - Protection Mechanism Failure
CVE-2020-1728		 CWE-693 Low
No
No
 9.0.5-1.redhat_00001.1.el6sso, 9.0.5-1.redhat_00001.1.el7sso, 9.0.5-1.redhat_00001.1.el8sso 06.04.2020 SB2020040631
SB2020081828
SB2020081829
and 1 more
#VU21706 - Insufficiently Protected Credentials
CVE-2019-3868		 CWE-522 Medium
No
No
 3.4.17-1.Final_redhat_00001.1.jbcs.el6, 3.4.17-1.Final_redhat_00001.1.jbcs.el7 10.10.2019 SB2019101007
SB2019042331
SB2019042332
and 2 more
#VU38015 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-12158		 CWE-79 Low
No
No
 2.5.14-1.Final_redhat_1.1.jbcs.el6, 2.5.14-1.Final_redhat_1.1.jbcs.el7 26.10.2017 SB2017102616
SB2017101734
SB2017101735
#VU38016 - Cross-Site Request Forgery (CSRF)
CVE-2017-12159		 CWE-352 Medium
No
No
 2.5.14-1.Final_redhat_1.1.jbcs.el6, 2.5.14-1.Final_redhat_1.1.jbcs.el7 26.10.2017 SB2017102616
SB2017101734
SB2017101735
#VU38017 - Improper Authentication
CVE-2017-12160		 CWE-287 Medium
No
No
 2.5.14-1.Final_redhat_1.1.jbcs.el6, 2.5.14-1.Final_redhat_1.1.jbcs.el7 26.10.2017 SB2017102616
SB2017101734
SB2017101735


Showing elements 81 - 100 out of 95