de.ahus1.keycloak.dropwizard:keycloak-dropwizard (>=0.2.1, <=0.3.0), org.keycloak:keycloak-account-api (1.5.0-final) +84 more potentially affected by CVE-2021-20262 via org.keycloak:keycloak-core (1.5.0-final)

org.keycloak:keycloak-core MAVEN version 1.5.0-final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard =0.2.1, =0.3.0 - org.keycloak:keycloak-account-api...

org.keycloak:keycloak-account-api (1.4.0.final), org.keycloak:keycloak-account-freemarker (1.4.0.final) +94 more potentially affected by CVE-2021-20262 via org.keycloak:keycloak-core (1.4.0.final)

org.keycloak:keycloak-core MAVEN version 1.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.4.0.final - org.keycloak:keycloak-account-freemarker 1.4.0.final ...

org.jboss.aerogear.unifiedpush:unifiedpush-service (1.2.1.final), org.jenkins-ci.plugins:keycloak (2.1.0) +59 more potentially affected by CVE-2021-20262 via org.keycloak:keycloak-core (3.4.0.final)

org.keycloak:keycloak-core MAVEN version 3.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-service 1.2.1.final - org.jenkins-ci.plugins:keycloak 2.1....

de.cidaas:cidaas-interceptor-spring-security-xml (0.0.1), org.fintrace:microservice-keycloak-support (>=0.0.2, <=0.0.3) +61 more potentially affected by CVE-2021-20262 via org.keycloak:keycloak-core (4.0.0.beta2)

org.keycloak:keycloak-core MAVEN version 4.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.cidaas:cidaas-interceptor-spring-security-xml 0.0.1 - org.fintrace:microservice-keycloak-support...

org.fintrace:microservice-keycloak-support (>=0.0.4, <=0.0.9), org.keycloak:keycloak-adapter-core (4.0.0.beta3) +64 more potentially affected by CVE-2021-20262 via org.keycloak:keycloak-core (4.0.0.beta3)

org.keycloak:keycloak-core MAVEN version 4.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.fintrace:microservice-keycloak-support =0.0.4, =0.0.9 - org.keycloak:keycloak-adapter-core...

com.canoo.dolphin-platform:dolphin-platform-security-client (>=0.19.0, <=1.0.0.cr3), de.adorsys.multibanking:keycloak-custom-secret-provider (>=1.3.0, <=1.20) +68 more potentially affected by CVE-2021-20262 via org.keycloak:keycloak-core (3.1.0.final)

org.keycloak:keycloak-core MAVEN version 3.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.canoo.dolphin-platform:dolphin-platform-security-client =0.19.0, =1.3.0, =1.3.0, =2.2.3 -...

be.atbash.ee.security:octopus-keycloak (>=0.4, <=0.6), be.atbash.ee.security:octopus-keycloak-rest (>=0.4, <=0.6) +61 more potentially affected by CVE-2021-20262 via org.keycloak:keycloak-core (2.0.0.final)

org.keycloak:keycloak-core MAVEN version 2.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - be.atbash.ee.security:octopus-keycloak =0.4, =0.4, =0.4, =0.4, =1.2.8.final, =1.2.8.final,...

org.keycloak:keycloak-adapter-core (2.2.0.cr1), org.keycloak:keycloak-admin-client (2.2.0.cr1) +51 more potentially affected by CVE-2021-20262 via org.keycloak:keycloak-core (2.2.0.cr1)

org.keycloak:keycloak-core MAVEN version 2.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.2.0.cr1 - org.keycloak:keycloak-admin-client 2.2.0.cr1 -...

org.keycloak:keycloak-adapter-core (2.3.0.final), org.keycloak:keycloak-admin-client (2.3.0.final) +51 more potentially affected by CVE-2021-20262 via org.keycloak:keycloak-core (2.3.0.final)

org.keycloak:keycloak-core MAVEN version 2.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.3.0.final - org.keycloak:keycloak-admin-client 2.3.0.final -...

org.keycloak:keycloak-adapter-core (2.2.1.final), org.keycloak:keycloak-admin-client (2.2.1.final) +51 more potentially affected by CVE-2021-20262 via org.keycloak:keycloak-core (2.2.1.final)

org.keycloak:keycloak-core MAVEN version 2.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.2.1.final - org.keycloak:keycloak-admin-client 2.2.1.final -...

org.hawkular.accounts:hawkular-accounts (>=2.0.7.final, <=2.0.10.final), org.hawkular.accounts:hawkular-accounts-api (>=2.0.7.final, <=2.0.10.final) +91 more potentially affected by CVE-2021-20262 via org.keycloak:keycloak-core (1.8.0.alpha1)

org.keycloak:keycloak-core MAVEN version 1.8.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.hawkular.accounts:hawkular-accounts =2.0.7.final, =2.0.7.final, =2.0.7.final, =2.0.7.final,...

org.keycloak:keycloak-account-api (1.8.0.cr2), org.keycloak:keycloak-account-freemarker (1.8.0.cr2) +82 more potentially affected by CVE-2021-20262 via org.keycloak:keycloak-core (1.8.0.cr2)

org.keycloak:keycloak-core MAVEN version 1.8.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.8.0.cr2 - org.keycloak:keycloak-account-freemarker 1.8.0.cr2 -...

io.apiman.plugins:apiman-plugins-keycloak-oauth-policy (>=1.2.7.beta1, <=1.2.7.final), io.apiman:apiman-distro-eap7 (>=1.2.7.beta1, <=1.2.7.final) +49 more potentially affected by CVE-2021-20262 via org.keycloak:keycloak-core (1.9.7.final)

org.keycloak:keycloak-core MAVEN version 1.9.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.apiman.plugins:apiman-plugins-keycloak-oauth-policy =1.2.7.beta1, =1.2.7.beta1, =1.2.7.beta1,...

org.keycloak:keycloak-adapter-core (2.1.0.cr1), org.keycloak:keycloak-admin-client (2.1.0.cr1) +48 more potentially affected by CVE-2021-20262 via org.keycloak:keycloak-core (2.1.0.cr1)

org.keycloak:keycloak-core MAVEN version 2.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.1.0.cr1 - org.keycloak:keycloak-admin-client 2.1.0.cr1 -...

org.keycloak:keycloak-adapter-core (2.5.0.final), org.keycloak:keycloak-admin-client (2.5.0.final) +52 more potentially affected by CVE-2021-20262 via org.keycloak:keycloak-core (2.5.0.final)

org.keycloak:keycloak-core MAVEN version 2.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.5.0.final - org.keycloak:keycloak-admin-client 2.5.0.final -...

com.kumuluz.ee.security:kumuluzee-security-keycloak (>=1.0.0, <=1.0.1), de.adorsys.keycloak:keycloak-config-cli (>=0.1.0-2, <=0.1.0-3) +60 more potentially affected by CVE-2021-20262 via org.keycloak:keycloak-core (3.2.1.final)

org.keycloak:keycloak-core MAVEN version 3.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.kumuluz.ee.security:kumuluzee-security-keycloak =1.0.0, =0.1.0-2, =1.2.0-beta.2, =1.2.0.final -...

org.hawkular.accounts:hawkular-accounts (>=2.0.20.final, <=2.0.22.final), org.hawkular.accounts:hawkular-accounts-api (>=2.0.20.final, <=2.0.22.final) +93 more potentially affected by CVE-2021-20262 via org.keycloak:keycloak-core (1.8.1.final)

org.keycloak:keycloak-core MAVEN version 1.8.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.hawkular.accounts:hawkular-accounts =2.0.20.final, =2.0.20.final, =2.0.20.final, =2.0.20.final,...

io.hawt:hawtio-app (>=2.0-beta-2, <=2.8.0), io.hawt:hawtio-maven-plugin (>=2.0-beta-2, <=2.8.0) +62 more potentially affected by CVE-2021-20262 via org.keycloak:keycloak-core (3.4.1.final)

org.keycloak:keycloak-core MAVEN version 3.4.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.hawt:hawtio-app =2.0-beta-2, =2.0-beta-2, =2.8.0 - org.keycloak:keycloak-adapter-core 3.4.1.final ...

CVE-2020-9413

CVE-2020-9413 affects TIBCO Managed File Transfer Command Center (CC) and Internet Server (IS) up to version 8.2.1 and earlier. The vulnerability resides in the MFT Browser file transfer and MFT Browser admin client components, allowing an attacker to craft a URL that, when visited by an authenti...

CVE-2020-9413: Improper Neutralization of Input During Web Page Generation

The MFT Browser file transfer client and MFT Browser admin client components of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center and TIBCO Managed File Transfer Internet Server contain a vulnerability that theoretically allows an attacker to craft an URL that will execute arbitrar...