Published: 01/09/2022 Updated: 18/10/2022

CVSS v3 Base Score: 3.8 | Impact Score: 2.5 | Exploitability Score: 1.2

VMScore: 0

A Stored Cross-site scripting (XSS) vulnerability was found in keycloak as shipped in Red Hat Single Sign-On 7. This flaw allows a privileged malicious user to execute malicious scripts in the admin console, abusing the default roles functionality.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat single sign-on 7.0

Synopsis Moderate: Red Hat Single Sign-On 753 security update on RHEL 7 Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic New Red Hat Single Sign-On 753 packages are now available for Red Hat Enterprise Linux 7Red Hat P ...

Synopsis Moderate: Red Hat Single Sign-On 753 security update Type/Severity Security Advisory: Moderate Topic A security update is now available for Red Hat Single Sign-On 75 from the Customer PortalRed Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base sco ...

Synopsis Moderate: Red Hat Single Sign-On 753 security update on RHEL 8 Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic New Red Hat Single Sign-On 753 packages are now available for Red Hat Enterprise Linux 8Red Hat P ...

CWE-79 https://bugzilla.redhat.com/show_bug.cgi?id=2101942 https://github.com/keycloak/keycloak/security/advisories/GHSA-w9mf-83w3-fv49 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2022:6782

CVE-2022-2256

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect