Red Hat Security Advisory

RHSA-2022:0407

Red Hat Single Sign-On 7.5.1 security update

Released 2022-02-02 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2021-03612 CVE-2021-20323 · GHSA-xpgc-j48j-jwv9

MEDIUM 54

A POST based reflected Cross Site Scripting vulnerability on has been identified in Keycloak.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.37246 Published 2022-03-25 Fixed in 17.0.0 CWE-79

TI-2021-02790 CVE-2021-3859 · GHSA-339q-62wm-c39w

LOW 36

A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01736 Published 2022-08-26 Partial fix · 2.2.15 CWE-214