PT-2017-12373

🗓️ 26 Oct 2017 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 1 Views

Authenticated reflected XSS in Keycloak admin console via HOST header URL.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software	4 Sep 202622:18	–	ibm
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains vulnerabilities related to use of netty-codec-http	19 May 202619:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Rational Developer for i	15 Sep 202613:43	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of Netty IBM webMethods Managed File Transfer is vulnerable to Improper Access Control and Allocation of Resources without Limits or Throttling	6 Aug 202613:36	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Netty affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	25 Aug 202618:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in netty affects IBM Netezza Appliance	13 Aug 202606:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains components with known vulnerabilities	2 Sep 202601:06	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of Bouncy Castle Inc. BC-JAVA bcprov IBM webMethods Managed File Transfer is vulnerable to a Covert Timing Channel vulnerability and Use of a Broken or Risky Cryptographic Algorithm vulnerability	6 Aug 202613:39	–	ibm
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by vulnerabilities in Bouncy Castle Crypto (CVE-2025-14813, CVE-2026-5598)	21 May 202615:57	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affect IBM Decision Optimization for Cloud Pak for Data.	19 Jun 202608:43	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/ghsa-v8h7-rr48-vmmv
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-SG80587
osv	www.osv.dev/vulnerability/ghsa-m4cv-j2px-7723
osv	www.osv.dev/vulnerability/CVE-2026-42587
osv	www.osv.dev/vulnerability/CVE-2026-42583
osv	www.osv.dev/vulnerability/CVE-2026-42580
osv	www.osv.dev/vulnerability/ghsa-84h7-rjj3-6jx4
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-42584
osv	www.osv.dev/vulnerability/CVE-2026-42581
osv	www.osv.dev/vulnerability/ghsa-xxqh-mfjm-7mv9

18 Sep 2026 00:00Current

CVSS 3.17.5 - 9.8

CVSS 25

CVSS 37.5

CVSS 49.9

EPSS0.02711

SSVC

Keycloak admin console reflected XSS HOST header