Read the docs
Red Hat Security Advisory

RHSA-2021:0974

Red Hat Single Sign-On 7.4.6 security update

Released 2021-03-23 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 7 records

Priority LOW 29

A flaw was found in jboss-remoting in versions before 5.0.20.SP1-redhat-00001.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01089 Published 2021-06-02 Partial fix · 5.0.20.Final CWE-400
TI-2020-06196 CVE-2020-7676 · GHSA-mhp6-pxh8-r675

Cross-site scripting in angular.js

Priority LOW 28

angular.js prior to 1.8.0 allows cross site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01932 Published 2020-06-08 Partial fix · 1.8.0 CWE-79
TI-2021-03516 CVE-2021-20220 · GHSA-qjwc-v72v-fq6r

A flaw was found in Undertow.

Priority LOW 24

A flaw was found in Undertow.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.012 Published 2021-02-23 Partial fix · 2.1.6, 2.0.34 CWE-444
Priority LOW 24

A flaw was found in Keycloak before 13.0.0 where an external identity provider, after successful authentication, redirects to a Keycloak endpoint that accepts multiple invocations with the use of the same "state" paramet…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01005 Published 2020-12-15 Fixed CWE-294
TI-2021-03542 CVE-2021-20250 · GHSA-2259-h742-5vr4

Information disclosure in wildfly

Priority LOW 21

A flaw was found in wildfly.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00743 Published 2021-05-13 Partial fix · 4.0.39 CWE-200
TI-2020-07155 CVE-2020-8908 · GHSA-5mg8-w23w-74h3

Temp directory permission issue in Guava

Priority LOW 18

A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.F…

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00924 Published 2020-12-10 Partial fix · 32.0, 32.0.0-android CWE-378