Jboss Keycloak Vulnérabilités

Chronologie

Version

3.2.1.Final1
1.0.01
1.0.11
1.0.21
1.0.31

Contre-mesures

Official Fix2
Temporary Fix0
Workaround0
Unavailable0
Not Defined3

Exploitabilité

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined5

Vecteur d'accès

Not Defined0
Physical0
Local0
Adjacent0
Network5

Authentification

Not Defined0
High0
Low0
None5

Interaction de l'utilisateur

Not Defined0
Required4
None1

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤51
≤61
≤73
≤80
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤51
≤61
≤73
≤80
≤90
≤100

VulDB

≤10
≤20
≤30
≤40
≤52
≤61
≤70
≤82
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤51
≤60
≤73
≤81
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤71
≤80
≤90
≤100

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k1
<2k4
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k5
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter le volume du marché

🔴 CTI Activités

Affected Versions (5): 1, 1.0.1, 1.0.2, 1.0.3, 3.2.1.Final

Type de logiciel: Application Server Software

PubliéBaseTempVulnérabilité0dayAujourd'huiExpConCTICVE
15/12/20196.66.6JBoss KeyCloak URL Validator Redirect$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2014-3652
10/12/20195.45.4JBoss KeyCloak login-status-iframe.html cross site scripting$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2014-3656
13/11/20194.34.3JBoss KeyCloak Soft Token cross site request forgery$0-$5k$0-$5kNot DefinedNot Defined0.02CVE-2014-3655
13/11/20186.46.5JBoss KeyCloak Login/Logout Redirect$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2018-14658
29/12/20176.46.1JBoss KeyCloak QR Code Generator dénie de service$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2014-3651

◂ PrécédentAperçuSuivant ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!