Redhat Keycloak vulnerabilities
98 published vulnerabilities in Redhat Keycloak. The most were published in 2020 (24), and 2 so far in 2026.
Redhat Keycloak vulnerabilities by year
2014
2016
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Redhat Keycloak vulnerabilities
- CVE-2022-4361 Keycloak vulnerable to cross-site scripting when validating URI-schemes on SAML and OIDC
- CVE-2022-1245 Keycloak vulnerable to privilege escalation on Token Exchange feature
- CVE-2021-20195 keycloak Self Stored Cross-site Scripting vulnerability
- CVE-2019-14910 Keycloak Authentication Error
- CVE-2019-14909 Keycloak Authentication Error
- CVE-2022-3782 Keycloak vulnerable to path traversal via double URL encoding
- CVE-2019-14837 keycloak vulnerable to unauthorized login via mail server setup
- CVE-2026-3047 Keycloak SAML Broken has Authentication Bypass by Primary Weakness
- CVE-2023-4918 Plaintext storage of user password
- CVE-2021-4133 Improper Authorization in Keycloak
- CVE-2024-1132 Keycloak: path transversal in redirection validation
- CVE-2022-4137 Keycloak: reflected xss attack
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.