CVE-2025-9162 vulnerabilities

Vulnerabilities for packages: keycloak...

CVE-2018-9162

Contec Smart Home 4.15 devices do not require authentication for newuser.php, edituser.php, deleteuser.php, and user.php, as demonstrated by changing the admin password and then obtaining control over doors...

RockyLinux 9 : gimp (RLSA-2025:9162)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:9162 advisory. gimp: Multiple use after free in XCF parser CVE-2025-48798 gimp: Multiple heap buffer overflows in TGA parser CVE-2025-48797 gimp: GIMP ICO File Parsing...

org.keycloak.testframework:keycloak-test-framework-core (26.2.3), org.keycloak.testframework:keycloak-test-framework-db-mariadb (26.2.3) +18 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.2.3)

org.keycloak:keycloak-model-storage-services MAVEN version 26.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-core 26.2.3 -...

org.keycloak.testframework:keycloak-test-framework-core (26.2.0), org.keycloak.testframework:keycloak-test-framework-db-mariadb (26.2.0) +18 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.2.0)

org.keycloak:keycloak-model-storage-services MAVEN version 26.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-core 26.2.0 -...

org.keycloak:keycloak-dependencies-server-all (25.0.2), org.keycloak:keycloak-guides (25.0.2) +5 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (25.0.2)

org.keycloak:keycloak-model-storage-services MAVEN version 25.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 25.0.2 -...

org.keycloak:keycloak-dependencies-server-all (24.0.4), org.keycloak:keycloak-guides (24.0.4) +5 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (24.0.4)

org.keycloak:keycloak-model-storage-services MAVEN version 24.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 24.0.4 -...

org.keycloak:keycloak-dependencies-server-all (24.0.1), org.keycloak:keycloak-guides (24.0.1) +5 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (24.0.1)

org.keycloak:keycloak-model-storage-services MAVEN version 24.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 24.0.1 -...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (5.2.0-26.1), org.keycloak.testframework:keycloak-test-framework-core (26.1.3) +18 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.1.3)

org.keycloak:keycloak-model-storage-services MAVEN version 26.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests 5.2.0-26.1 -...

org.keycloak:keycloak-dependencies-server-all (26.0.7), org.keycloak:keycloak-guides (26.0.7) +7 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.0.7)

org.keycloak:keycloak-model-storage-services MAVEN version 26.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 26.0.7 -...

org.keycloak:keycloak-dependencies-server-all (25.0.5), org.keycloak:keycloak-guides (25.0.5) +5 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (25.0.5)

org.keycloak:keycloak-model-storage-services MAVEN version 25.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 25.0.5 -...

org.keycloak.testframework:keycloak-test-framework-clustering (26.4.1), org.keycloak.testframework:keycloak-test-framework-core (26.4.1) +22 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.4.1)

org.keycloak:keycloak-model-storage-services MAVEN version 26.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-clustering 26.4.1 -...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (5.7.2), net.optionfactory.keycloak:optionfactory-keycloak-providers (>=9.4, <=9.5) +28 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.6.3)

org.keycloak:keycloak-model-storage-services MAVEN version 26.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests 5.7.2 -...

net.optionfactory.keycloak:optionfactory-keycloak-providers (>=8.1, <=8.9), org.keycloak.testframework:keycloak-test-framework-clustering (>=26.3.0, <=26.3.4) +21 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (>=26.3.0, <=26.3.4)

org.keycloak:keycloak-model-storage-services MAVEN version =26.3.0, =8.1, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.4 and more Source cves: CVE-2025-...

net.optionfactory.keycloak:optionfactory-keycloak-providers (>=8.1, <=8.9), org.keycloak.testframework:keycloak-test-framework-clustering (>=26.3.0, <=26.3.3) +21 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (>=26.3.0, <=26.3.3)

org.keycloak:keycloak-model-storage-services MAVEN version =26.3.0, =8.1, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.3 and more Source cves: CVE-2025-...

net.optionfactory.keycloak:optionfactory-keycloak-providers (>=9.11, <=9.15), org.keycloak.testframework:keycloak-test-framework-clustering (26.7.2) +28 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.7.2)

org.keycloak:keycloak-model-storage-services MAVEN version 26.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - net.optionfactory.keycloak:optionfactory-keycloak-providers =9.11, =9....

net.optionfactory.keycloak:optionfactory-keycloak-providers (9.10), org.keycloak.testframework:keycloak-test-framework-clustering (26.7.1) +28 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.7.1)

org.keycloak:keycloak-model-storage-services MAVEN version 26.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - net.optionfactory.keycloak:optionfactory-keycloak-providers 9.10 -...

org.keycloak.testframework:keycloak-test-framework-clustering (26.5.6), org.keycloak.testframework:keycloak-test-framework-core (26.5.6) +23 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.5.6)

org.keycloak:keycloak-model-storage-services MAVEN version 26.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-clustering 26.5.6 -...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=5.6.2, <=5.7.1), net.optionfactory.keycloak:optionfactory-keycloak-providers (9.3) +28 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.6.2)

org.keycloak:keycloak-model-storage-services MAVEN version 26.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests =5.6.2, =5.7.1 -...

org.keycloak.testframework:keycloak-test-framework-clustering (26.5.0), org.keycloak.testframework:keycloak-test-framework-core (26.5.0) +23 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.5.0)

org.keycloak:keycloak-model-storage-services MAVEN version 26.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-clustering 26.5.0 -...