Product by Red Hat
Red Hat Single Sign-on 7.6 For Rhel 7
32 known vulnerabilities in Red Hat Single Sign-on 7.6 For Rhel 7 (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
32
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-1635 | Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol | 7.5 | |
| High | CVE-2025-9784 | Undertow: undertow madeyoureset http/2 ddos vulnerability | 7.5 | |
| Critical | CVE-2025-12543 | Red Hat build of Apache Camel 4.14.4 for Spring Boot 3.5.11: Improper Input Validation | 9.6 | |
| High | CVE-2023-3223 | Undertow: outofmemoryerror due to @multipartconfig handling | 7.5 | |
| High | CVE-2024-8698 | Keycloak: Improper Verification of Cryptographic Signature | 7.7 | |
| High | CVE-2024-1132 | Keycloak: path transversal in redirection validation | 8.1 | |
| Medium | CVE-2024-8883 | Keycloak: vulnerable redirect uri validation results in open redirec | 6.1 | |
| High | CVE-2023-1108 | Undertow: infinite loop in sslconduit during close | 7.5 | |
| High | CVE-2026-0603 | Org.hibernate/hibernate-core: SQL Injection | 8.3 | |
| High | CVE-2026-7307 | Keycloak: keycloak: denial of service via specially crafted saml input | 7.5 | |
| High | CVE-2026-7507 | Red Hat build of Keycloak 26.2: Authentication Bypass by Spoofing | 7.5 | |
| High | CVE-2026-15563 | Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos | 7.4 | |
| High | CVE-2022-4137 | Keycloak: reflected xss attack | 8.1 | |
| High | CVE-2023-6563 | Keycloak: offline session token dos | 7.7 | |
| High | CVE-2026-4634 | Keycloak: keycloak: denial of service via excessive processing of openid connect scope parameters | 7.5 | |
| High | CVE-2023-6291 | Keycloak: redirect_uri validation bypass | 7.1 | |
| High | CVE-2024-7341 | Wildfly-elytron: org.keycloak/keycloak-services: session fixation in elytron saml adapters | 7.1 | |
| Medium | CVE-2022-3916 | Keycloak: session takeover with oidc offline refreshtokens | 6.8 | |
| Medium | CVE-2023-6134 | Keycloak: reflected xss via wildcard in oidc redirect_uri | 4.6 | |
| Medium | CVE-2023-6544 | Keycloak: authorization bypass | 5.4 | |
| Medium | CVE-2024-4629 | Keycloak: potential bypass of brute force protection | 6.5 | |
| Medium | CVE-2023-6484 | Keycloak: log injection during webauthn authentication or registration | 5.3 | |
| Medium | CVE-2026-2575 | Keycloak: keycloak: denial of service due to excessive samlrequest decompression | 5.3 | |
| High | CVE-2026-2092 | Red Hat build of Keycloak 26.2: Improper Validation of Specified Type of Input | 7.7 | |
| Medium | CVE-2023-6927 | Keycloak: open redirect via "form_post.jwt" jarm response mode | 4.6 |