CVE-2025-68833 HCL Hive is affected by use of a cryptographic primitive with a risky implementation

HCL Hive Keycloak IAM Instance is affected by insufficient granularity of access control which could allow an attacker unauthorized access to resources...

CVE-2025-68833 HCL Hive is affected by use of a cryptographic primitive with a risky implementation

HCL Hive Keycloak IAM Instance is affected by insufficient granularity of access control which could allow an attacker unauthorized access to resources...

CVE-2025-68833: Use of a Cryptographic Primitive with a Risky Implementation

HCL Hive Keycloak IAM Instance is affected by insufficient granularity of access control which could allow an attacker unauthorized access to resources...

com.ritense.valtimo:keycloak-iam (>=9.26.1.release, <=9.26.2.release), de.arbeitsagentur.opdt:keycloak-cassandra-extension (0.4.5-20.0.2) +63 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (20.0.2)

org.keycloak:keycloak-server-spi-private MAVEN version 20.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.ritense.valtimo:keycloak-iam =9.26.1.release, =2.0.5, =2.0.5, =2.0.5,...

com.avast.grpc.jwt:grpc-java-jwt-keycloak (0.5.9), com.ritense.valtimo:keycloak-iam (>=9.26.1.release, <=9.26.2.release) +76 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (20.0.2)

org.keycloak:keycloak-core MAVEN version 20.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.avast.grpc.jwt:grpc-java-jwt-keycloak 0.5.9 - com.ritense.valtimo:keycloak-iam =9.26.1.release, =2.0.5...

com.avast.grpc.jwt:grpc-java-jwt-keycloak (0.5.9), com.ritense.valtimo:keycloak-iam (>=9.26.1.release, <=9.26.2.release) +76 more potentially affected by CVE-2024-10039 via org.keycloak:keycloak-core (20.0.2)

org.keycloak:keycloak-core MAVEN version 20.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.avast.grpc.jwt:grpc-java-jwt-keycloak 0.5.9 - com.ritense.valtimo:keycloak-iam =9.26.1.release, =2.0.5...