Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 123

Export CSV
CVE-2016-8609

keycloak: account hijacking via auth code fixation

It was found that the keycloak before 2.3.0 did not implement authentication flow correctly. An attacker could use this flaw to construct a phishing URL, from which he could hijack the user's session. This could lead to information disclosure, or permit further possible attacks.

CVSS 3.0 · 3.7 Low EPSS 1.7% KEV · Not listed
Vendors
Redhat
Products
Jboss Single Sign On Keycloak
CVE-2014-3652

KeyCloak: Open redirect vulnerability

JBoss KeyCloak: Open redirect vulnerability via failure to validate the redirect URL.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Keycloak