Red Hat Single Sign-on 7.0
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*
part: a version: 7.0 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Single Sign On (2da82ce9-a16b-5290-b161-4a01040f7fcb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-4874 |
vulnerable | 2026-06-08 08:07:02.573638 |
Org.keycloak.protocol.oidc.grants: org.keycloak.services.managers: keycloak: server-side request forgery via oidc token endpoint manipulation
LOW (3.1)
A flaw was found in Keycloak. An authenticated attacker can perform Server-Side Request Forgery (SSRF) by manipulating the `client_session_host` parameter during refresh token requests. This occurs when a Keycloak client is configured to use the `backchannel.logout.url` with the `application.session.host` placeholder. Successful exploitation allows the attacker to make HTTP requests from the Keycloak server’s network context, potentially probing internal networks or internal APIs, leading to information disclosure.
Published: 2026-03-26T07:12:37.545Z
Updated: 2026-06-26T07:01:28.059Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4366 |
vulnerable | 2026-06-08 08:05:13.291900 |
Keycloak-services: blind server-side request forgery (ssrf) via http redirect handling in keycloak
MEDIUM (5.8)
A flaw was identified in Keycloak, an identity and access management solution, where it improperly follows HTTP redirects when processing certain client configuration requests. This behavior allows an attacker to trick the server into making unintended requests to internal or restricted resources. As a result, sensitive internal services such as cloud metadata endpoints could be accessed. This issue may lead to information disclosure and enable attackers to map internal network infrastructure.
Published: 2026-03-18T04:02:59.959Z
Updated: 2026-06-09T16:36:05.369Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3260 |
vulnerable | 2026-06-08 08:01:18.282551 |
Details available
Published: 2026-03-24T04:11:16.085Z
Updated: 2026-07-07T19:50:22.087Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3121 |
vulnerable | 2026-06-08 08:01:17.888090 |
Keycloak: org.keycloak/keycloak-services: keycloak: privilege escalation via manage-clients permission
MEDIUM (6.5)
A flaw was found in Keycloak. An administrator with `manage-clients` permission can exploit a misconfiguration where this permission is equivalent to `manage-permissions`. This allows the administrator to escalate privileges and gain control over roles, users, or other administrative functions within the realm. This privilege escalation can occur when admin permissions are enabled at the realm level.
Published: 2026-03-26T19:13:26.086Z
Updated: 2026-04-02T16:39:35.672Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3009 |
vulnerable | 2026-06-08 08:01:17.313134 |
Org.keycloak/keycloak-services: improper enforcement of disabled identity provider in identitybrokerservice (authentication bypass)
HIGH (8.1)
A security flaw in the IdentityBrokerService.performLogin endpoint of Keycloak allows authentication to proceed using an Identity Provider (IdP) even after it has been disabled by an administrator. An attacker who knows the IdP alias can reuse a previously generated login request to bypass the administrative restriction. This undermines access control enforcement and may allow unauthorized authentication through a disabled external provider.
Published: 2026-03-05T18:27:43.294Z
Updated: 2026-07-15T01:10:09.461Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-28369 |
vulnerable | 2026-06-08 07:55:15.208650 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-28368 |
vulnerable | 2026-06-08 07:55:15.203922 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-28367 |
vulnerable | 2026-06-08 07:55:15.201474 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9784 |
vulnerable | 2026-06-08 07:47:09.798076 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12543 |
vulnerable | 2026-06-08 07:04:30.411929 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7885 |
vulnerable | 2026-06-08 06:58:23.815118 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6927 |
vulnerable | 2026-06-08 06:21:56.349622 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6841 |
vulnerable | 2026-06-08 06:21:56.034785 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5379 |
vulnerable | 2026-06-08 06:19:43.482765 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-48795 |
vulnerable | 2026-06-08 06:14:28.150851 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-44487 |
vulnerable | 2026-06-08 06:12:41.259635 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1932 |
vulnerable | 2026-06-08 05:52:37.236440 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1664 |
vulnerable | 2026-06-08 05:52:36.474474 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0105 |
not_vulnerable | 2026-06-08 05:52:04.291412 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0091 |
not_vulnerable | 2026-06-08 05:52:04.264483 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4492 |
vulnerable | 2026-06-08 05:51:59.611511 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4039 |
vulnerable | 2026-06-08 05:51:36.598477 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2764 |
vulnerable | 2026-06-08 05:43:36.426529 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2668 |
vulnerable | 2026-06-08 05:43:35.999505 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2256 |
vulnerable | 2026-06-08 05:43:35.137181 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2237 |
vulnerable | 2026-06-08 05:43:35.091203 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1319 |
vulnerable | 2026-06-08 05:39:12.720657 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1278 |
vulnerable | 2026-06-08 05:39:12.610792 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1259 |
vulnerable | 2026-06-08 05:39:12.510057 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0853 |
vulnerable | 2026-06-08 05:39:11.344654 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0225 |
vulnerable | 2026-06-08 05:39:09.565105 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0084 |
vulnerable | 2026-06-08 05:39:09.216524 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-4104 |
vulnerable | 2026-06-08 05:38:08.361535 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3827 |
vulnerable | 2026-06-08 05:33:54.387514 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3754 |
vulnerable | 2026-06-08 05:33:53.938481 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3637 |
vulnerable | 2026-06-08 05:33:53.235510 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3632 |
vulnerable | 2026-06-08 05:33:53.217335 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3461 |
vulnerable | 2026-06-08 05:33:52.292803 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20262 |
vulnerable | 2026-06-08 05:29:08.844576 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27838 |
vulnerable | 2026-06-08 05:23:53.304311 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25689 |
vulnerable | 2026-06-08 05:22:37.207509 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25644 |
vulnerable | 2026-06-08 05:22:37.010938 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1757 |
vulnerable | 2026-06-08 05:21:02.983898 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1724 |
vulnerable | 2026-06-08 05:21:02.890977 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1717 |
vulnerable | 2026-06-08 05:21:02.875169 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1714 |
vulnerable | 2026-06-08 05:21:02.870887 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14307 |
vulnerable | 2026-06-08 05:19:22.924455 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14299 |
vulnerable | 2026-06-08 05:19:22.874357 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14297 |
vulnerable | 2026-06-08 05:19:22.867467 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10758 |
vulnerable | 2026-06-08 05:16:35.846088 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10734 |
vulnerable | 2026-06-08 05:16:35.774686 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3873 |
vulnerable | 2026-06-08 05:13:56.261273 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3872 |
vulnerable | 2026-06-08 05:13:56.260750 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14888 |
vulnerable | 2026-06-08 05:12:56.351170 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14887 |
vulnerable | 2026-06-08 05:12:56.345234 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14885 |
vulnerable | 2026-06-08 05:12:56.338802 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10201 |
vulnerable | 2026-06-08 05:12:22.510399 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10184 |
vulnerable | 2026-06-08 05:12:22.459784 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.