Single Sign-on Security Vulnerabilities and Issues — Single Sign-on CVE List

Lucene search

RedhatSingle Sign-on

3 matches found

CVE•added 2022/09/01 9:15 p.m.•193 views

CVE-2022-2764

A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations.

4.9CVSS5.1AI score0.00105EPSS

CVE•added 2022/09/13 2:15 p.m.•116 views

CVE-2022-1278

A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain.

7.5CVSS7.3AI score0.00761EPSS

CVE•added 2022/09/01 9:15 p.m.•109 views

CVE-2022-2256

A Stored Cross-site scripting (XSS) vulnerability was found in keycloak as shipped in Red Hat Single Sign-On 7. This flaw allows a privileged attacker to execute malicious scripts in the admin console, abusing the default roles functionality.

3.8CVSS4AI score0.00308EPSS