Keycloak
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 214 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 19, 2014 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Keycloak-services: keycloak-services: injection of roles into realm default-roles via dcr endpoint
Keycloak-services: keycloak-services: unverified idp email auto-linking enables account takeover
Keycloak-services: keycloak-services: vault secret disclosure via client registration installation configuration
Keycloak-services: keycloak-services: unauthenticated cpu denial of service via saml xml datetime and duration parsing
Keycloak-services: keycloak-services: smtp starttls plaintext credential and message downgrade
Keycloak-services: keycloak-services: blind ssrf via x.509 authenticator fetching attacker-controlled crl-dp/ocsp urls
Keycloak-services: keycloak-services: unbounded metric series creation via idp tag on broker login endpoint
Monitor Keycloak in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.