Redhat Single Sign-On vulnerabilities
112 published vulnerabilities in Redhat Single Sign-On, 1 of them exploited in the wild. The most were published in 2019 (20), and 12 so far in 2026.
Redhat Single Sign-On vulnerabilities by year
2018
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Redhat Single Sign-On vulnerabilities
- CVE-2023-44487 HTTP/2 Rapid Reset Attack
- CVE-2022-4361 Keycloak vulnerable to cross-site scripting when validating URI-schemes on SAML and OIDC
- CVE-2019-14379 Deserialization of untrusted data in FasterXML jackson-databind
- CVE-2025-12543 Undertow HTTP server core doesn't properly validate the Host header in incoming HTTP requests
- CVE-2019-14837 keycloak vulnerable to unauthorized login via mail server setup
- CVE-2026-28367 Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator
- CVE-2026-28368 Undertow: undertow: request smuggling via inconsistent header parsing
- CVE-2026-28369 Undertow: undertow: request smuggling via malformed http request headers
- CVE-2026-15573 Keycloak-services: keycloak-services: authorization bypass via unnormalized uri matching in pathmatcher
- CVE-2026-16102 Keycloak-services: keycloak-services: default dcr policy allows role forgery via user property mappers
- CVE-2026-3009 Keycloak allows authentication using an Identity Provider (IdP) even after it has been disabled by an administrator
- CVE-2024-1132 Keycloak: path transversal in redirection validation
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.