org.keycloak:keycloak-adapter-core (3.4.1.cr1), org.keycloak:keycloak-admin-client (3.4.1.cr1) +56 more potentially affected by CVE-2018-14637 via org.keycloak:keycloak-core (3.4.1.cr1)

org.keycloak:keycloak-core MAVEN version 3.4.1.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 3.4.1.cr1 - org.keycloak:keycloak-admin-client 3.4.1.cr1 -...

org.keycloak:keycloak-adapter-core (3.3.0.final), org.keycloak:keycloak-admin-client (3.3.0.final) +57 more potentially affected by CVE-2018-14637 via org.keycloak:keycloak-core (3.3.0.final)

org.keycloak:keycloak-core MAVEN version 3.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 3.3.0.final - org.keycloak:keycloak-admin-client 3.3.0.final -...

org.keycloak:keycloak-account-api (1.3.0.final), org.keycloak:keycloak-account-freemarker (1.3.0.final) +87 more potentially affected by CVE-2018-14637 via org.keycloak:keycloak-core (1.3.0.final)

org.keycloak:keycloak-core MAVEN version 1.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.3.0.final - org.keycloak:keycloak-account-freemarker 1.3.0.final ...

org.keycloak.example.demo:product-portal-fuse-example (1.1.1.final), org.keycloak:keycloak-account-api (1.1.1.final) +66 more potentially affected by CVE-2018-14637 via org.keycloak:keycloak-core (1.1.1.final)

org.keycloak:keycloak-core MAVEN version 1.1.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak.example.demo:product-portal-fuse-example 1.1.1.final - org.keycloak:keycloak-account-api...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.3), org.jboss.aerogear.unifiedpush:unifiedpush-jaxrs (1.0.3) +51 more potentially affected by CVE-2018-14637 via org.keycloak:keycloak-core (1.0.5.final)

org.keycloak:keycloak-core MAVEN version 1.0.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.3 -...

org.jenkins-ci.plugins:keycloak (2.0.3), org.keycloak:keycloak-adapter-core (3.2.0.final) +58 more potentially affected by CVE-2018-14637 via org.keycloak:keycloak-core (3.2.0.final)

org.keycloak:keycloak-core MAVEN version 3.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jenkins-ci.plugins:keycloak 2.0.3 - org.keycloak:keycloak-adapter-core 3.2.0.final -...

org.keycloak:keycloak-adapter-core (2.2.0.cr1), org.keycloak:keycloak-admin-client (2.2.0.cr1) +51 more potentially affected by CVE-2018-14637 via org.keycloak:keycloak-core (2.2.0.cr1)

org.keycloak:keycloak-core MAVEN version 2.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.2.0.cr1 - org.keycloak:keycloak-admin-client 2.2.0.cr1 -...

org.keycloak:keycloak-adapter-core (2.4.0.final), org.keycloak:keycloak-admin-client (2.4.0.final) +52 more potentially affected by CVE-2018-14637 via org.keycloak:keycloak-core (2.4.0.final)

org.keycloak:keycloak-core MAVEN version 2.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.4.0.final - org.keycloak:keycloak-admin-client 2.4.0.final -...

org.keycloak:keycloak-adapter-core (2.4.0.cr1), org.keycloak:keycloak-admin-client (2.4.0.cr1) +52 more potentially affected by CVE-2018-14637 via org.keycloak:keycloak-core (2.4.0.cr1)

org.keycloak:keycloak-core MAVEN version 2.4.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.4.0.cr1 - org.keycloak:keycloak-admin-client 2.4.0.cr1 -...

io.apiman.plugins:apiman-plugins-keycloak-oauth-policy (>=1.2.7.beta1, <=1.2.7.final), io.apiman:apiman-distro-eap7 (>=1.2.7.beta1, <=1.2.7.final) +49 more potentially affected by CVE-2018-14637 via org.keycloak:keycloak-core (1.9.7.final)

org.keycloak:keycloak-core MAVEN version 1.9.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.apiman.plugins:apiman-plugins-keycloak-oauth-policy =1.2.7.beta1, =1.2.7.beta1, =1.2.7.beta1,...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (0.7.3), io.apiman.plugins:apiman-plugins-keycloak-oauth-policy (1.2.6.final) +55 more potentially affected by CVE-2018-14637 via org.keycloak:keycloak-core (1.9.4.final)

org.keycloak:keycloak-core MAVEN version 1.9.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 0.7.3 -...

org.keycloak:keycloak-adapter-core (2.0.0.cr1), org.keycloak:keycloak-admin-client (2.0.0.cr1) +46 more potentially affected by CVE-2018-14637 via org.keycloak:keycloak-core (2.0.0.cr1)

org.keycloak:keycloak-core MAVEN version 2.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.0.0.cr1 - org.keycloak:keycloak-admin-client 2.0.0.cr1 -...

org.hawkular.accounts:hawkular-accounts (>=2.0.23.final, <=2.0.39.final), org.hawkular.accounts:hawkular-accounts-api (>=2.0.23.final, <=2.0.39.final) +53 more potentially affected by CVE-2018-14637 via org.keycloak:keycloak-core (1.9.1.final)

org.keycloak:keycloak-core MAVEN version 1.9.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.hawkular.accounts:hawkular-accounts =2.0.23.final, =2.0.23.final, =2.0.23.final, =2.0.23.final,...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.0.beta2), org.jboss.aerogear.unifiedpush:unifiedpush-jaxrs (1.0.0.beta2) +49 more potentially affected by CVE-2018-14637 via org.keycloak:keycloak-core (1.0-beta-4)

org.keycloak:keycloak-core MAVEN version 1.0-beta-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.0.beta2 -...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.0.final), org.jboss.aerogear.unifiedpush:unifiedpush-jaxrs (1.0.0.final) +50 more potentially affected by CVE-2018-14637 via org.keycloak:keycloak-core (1.0-rc-1)

org.keycloak:keycloak-core MAVEN version 1.0-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.0.final -...

org.keycloak:keycloak-adapter-core (1.9.0.cr1), org.keycloak:keycloak-admin-client (1.9.0.cr1) +42 more potentially affected by CVE-2018-14637 via org.keycloak:keycloak-core (1.9.0.cr1)

org.keycloak:keycloak-core MAVEN version 1.9.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 1.9.0.cr1 - org.keycloak:keycloak-admin-client 1.9.0.cr1 -...

CVE-2018-18417

In the 3.1 version of Ekushey Project Manager CRM, Stored XSS has been discovered in the input and upload sections, as demonstrated by the name parameter to the index.php/admin/client/create URI...

PT-2018-14448

Name of the Vulnerable Software and Affected Versions Ekushey Project Manager CRM version 3.1 Description A Stored XSS issue has been found in the input and upload sections of the software. This is demonstrated by the name parameter to the "index.php/admin/client/create" URI. Recommendations For...

CVE-2018-18417: Improper Neutralization of Input During Web Page Generation

In the 3.1 version of Ekushey Project Manager CRM, Stored XSS has been discovered in the input and upload sections, as demonstrated by the name parameter to the index.php/admin/client/create URI...

org.keycloak:keycloak-adapter-core (2.5.0.final), org.keycloak:keycloak-admin-client (2.5.0.final) +52 more potentially affected by CVE-2017-12161 via org.keycloak:keycloak-core (2.5.0.final)

org.keycloak:keycloak-core MAVEN version 2.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.5.0.final - org.keycloak:keycloak-admin-client 2.5.0.final -...