Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

keycloak Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-1609`Org.keycloak/keycloak-quarkus-server: keycloak: unauthorized access via jwt authorization grant with disabled users	Exploitation statusNot known exploited	FixYes	Affected productkeycloak	Published07/16/2026	SeverityHigh
`CVE-2025-12150`Org.keycloak/keycloak-services: webauthn attestation statement verification bypass	Exploitation statusNot known exploited	FixYes	Affected productkeycloak	Published02/27/2026	SeverityLow
`CVE-2025-13467`Org.keycloak.storage.ldap: keycloak: deserialization of untrusted data in ldap user federation	Exploitation statusNot known exploited	FixYes	Affected productkeycloak	Published11/25/2025	SeverityMedium
`CVE-2025-11538`Keycloak-server: debug default bind address	Exploitation statusNot known exploited	FixYes	Affected productkeycloak	Published11/13/2025	SeverityMedium
`CVE-2025-12390`Org.keycloak.protocol.oidc.endpoints.logoutendpoint: offline session takeover due to reused authentication session id	Exploitation statusNot known exploited	FixYes	Affected productkeycloak	Published10/28/2025	SeverityMedium
`CVE-2025-10939`Org.keycloak/keycloak-quarkus-server: unable to restrict access to the admin console	Exploitation statusNot known exploited	FixYes	Affected productkeycloak	Published10/28/2025	SeverityLow
`CVE-2025-12110`Keycloak: org.keycloak:keycloak-services: user can refresh offline session even after client's offline_access scope was removed	Exploitation statusNot known exploited	FixYes	Affected productkeycloak	Published10/23/2025	SeverityMedium
`CVE-2025-11429`Keycloak-server: too long and not settings compliant session	Exploitation statusNot known exploited	FixYes	Affected productkeycloak	Published10/23/2025	SeverityMedium
`CVE-2025-10044`Keycloak: keycloak error_description injection on error pages	Exploitation statusNot known exploited	FixYes	Affected productkeycloak	Published09/05/2025	SeverityMedium
`CVE-2025-9162`Org.keycloak/keycloak-model-storage-service: variable injection into environment variables	Exploitation statusNot known exploited	FixYes	Affected productkeycloak	Published08/21/2025	SeverityMedium
`CVE-2025-8419`Org.keycloak/keycloak-services: keycloak smtp inject vulnerability	Exploitation statusNot known exploited	FixYes	Affected productkeycloak	Published08/06/2025	SeverityMedium
`CVE-2022-4361`	Exploitation statusNot known exploited	FixNot confirmed	Affected productNot confirmed	Published07/07/2023	SeverityCritical
`CVE-2020-10686`	Exploitation statusNot confirmed	FixYes	Affected productkeycloak	Published05/04/2020	SeverityMedium
`CVE-2019-14820`	Exploitation statusNot confirmed	FixNot confirmed	Affected productkeycloak	Published01/08/2020	SeverityMedium
`CVE-2019-14832`	Exploitation statusNot confirmed	FixNot confirmed	Affected productkeycloak REST API	Published10/15/2019	SeverityMedium
`CVE-2017-12161`	Exploitation statusNot confirmed	FixNot confirmed	Affected productkeycloak	Published02/21/2018	SeverityUnknown
`CVE-2014-3651`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published12/29/2017	SeverityUnknown
`CVE-2017-12158`	Exploitation statusNot confirmed	FixNot confirmed	Affected productkeycloak	Published10/26/2017	SeverityUnknown
`CVE-2017-12159`	Exploitation statusNot confirmed	FixNot confirmed	Affected productkeycloak	Published10/26/2017	SeverityUnknown
`CVE-2014-3709`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published10/18/2017	SeverityUnknown
`CVE-2017-7474`	Exploitation statusNot confirmed	FixNot confirmed	Affected productKeycloak Node.js adapter	Published05/12/2017	SeverityUnknown

21 / 21 Results

All vulnerabilities loaded

Security vulnerabilities from keycloak

keycloak

How many security vulnerabilities does keycloak have?

Which keycloak product has the most security vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management

Popular keycloak products

keycloak

keycloak REST API