Keycloak
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 201 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 19, 2014 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Keycloak-services: keycloak-services: smtp starttls plaintext credential and message downgrade
Keycloak-services: keycloak-services: blind ssrf via x.509 authenticator fetching attacker-controlled crl-dp/ocsp urls
Keycloak-services: keycloak-services: unbounded metric series creation via idp tag on broker login endpoint
Keycloak-services: keycloak-services: generic user update bypasses denied reset-password permission
Keycloak-services: keycloak-services: par single-use bypass via prompt=none silent authentication path
Keycloak-services: keycloak-services: 2fa setup enforcement bypass via authentication session restart endpoint
Keycloak-services: keycloak-services: uma scope merge across resource owners via resource name collision
Keycloak-services: keycloak-services: cross-realm client read/write via request-level cache missing realm ownership check
Monitor Keycloak in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.