Redhat Single Sign-On vulnerabilities
102 known vulnerabilities affecting redhat/single_sign-on.
Total CVEs
102
CISA KEV
1
actively exploited
Public exploits
5
Exploited in wild
4
Severity breakdown
CRITICAL10HIGH45MEDIUM41LOW6
Vulnerabilities
Page 6 of 6
CVE-2020-1717P4LOWCVSS 2.7v7.02021-02-11
CVE-2020-1717 [LOW] CWE-209 CVE-2020-1717: A flaw was found in Keycloak 7.0.1. A logged in user can do an account email enumeration attack.
A flaw was found in Keycloak 7.0.1. A logged in user can do an account email enumeration attack.
nvd
CVE-2020-10734P4LOWCVSS 3.3v7.02021-02-11
CVE-2020-10734 [LOW] CWE-352 CVE-2020-10734: A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF pr
A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF protection. Versions shipped with Red Hat Fuse 7, Red Hat Single Sign-on 7, and Red Hat Openshift Application Runtimes are believed to be vulnerable.
nvd
← Previous6 / 6