Keycloak
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 196 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 19, 2014 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Keycloak-services: keycloak-services: generic user update bypasses denied reset-password permission
Keycloak-services: keycloak-services: par single-use bypass via prompt=none silent authentication path
Keycloak-services: keycloak-services: 2fa setup enforcement bypass via authentication session restart endpoint
Keycloak-services: keycloak-services: uma scope merge across resource owners via resource name collision
Keycloak-services: keycloak-services: cross-realm client read/write via request-level cache missing realm ownership check
Keycloak-services: keycloak-services: authorization services policy evaluation endpoint leaks user identity
Keycloak-services: keycloak-services: admin credential delete bypasses denied reset-password permission
Monitor Keycloak in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.