n/a KeyCloak

Name: n/a KeyCloak
Brand: n/a

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

3critical11high18medium3low

updated 2026-10-27

vulnerabilities (35)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-10770US	medium5.3	69.7% (99th)	Exploit	no fix	2020-12-15	≤ keycloak 13.0.0
CVE-2020-27838US	medium6.5	17.9% (97th)	Exploit	no fix	2021-03-08	≤ keycloak 13.0.0
CVE-2021-3754US	medium5.3	2.19% (82nd)	Exploit	no fix	2022-08-26	≤ Not-Known
CVE-2022-1274US	medium5.4	0.70% (53rd)	Exploit	no fix	2023-03-29	≤ unknown
CVE-2022-0225US	medium5.4	3.20% (88th)	—	no fix	2022-08-26	≤ Not-Known
CVE-2020-10758US	high7.5	1.95% (80th)	—	no fix	2020-09-16	≤ Keycloak before 11.0.1
CVE-2020-1694US	medium4.9	1.64% (76th)	—	no fix	2020-09-16	≤ all versions before 10.0.0
CVE-2022-1245US	critical9.8OT elevated	1.41% (73rd)	—	no fix	2022-07-08	≤ keycloak versions prior to 18.0.0
CVE-2021-4133US	high8.8OT elevated	1.37% (72nd)	—	no fix	2022-01-25	≤ keycloak 15.1.1
CVE-2021-20195US	critical9.6	1.25% (69th)	—	no fix	2021-05-28	≤ keycloak 13.0.0
CVE-2021-20222US	high7.5	1.19% (68th)	—	no fix	2021-03-23	≤ keycloak 13.0.0
CVE-2021-3856US	medium4.3	1.16% (67th)	—	no fix	2022-08-26	≤ Fixed in 15.1.0
CVE-2021-3632US	high7.5	1.16% (67th)	—	no fix	2022-08-26	≤ Fixed in v15.1.0
CVE-2021-3827US	medium6.8	1.11% (66th)	—	no fix	2022-08-23	≤ Fixed in v18.0.0
CVE-2019-14909US	high8.3	1.08% (65th)	—	no fix	2019-12-04	≤ n/a
CVE-2019-14910US	critical9.8	1.05% (64th)	—	no fix	2019-12-05	≤ n/a
CVE-2020-14302US	medium4.9OT elevated	1.00% (63rd)	—	no fix	2020-12-15	≤ keycloak 13.0.0
CVE-2022-2668US	high7.2	1.00% (63rd)	—	no fix	2022-08-05	≤ Keycloak 18
CVE-2020-10748US	medium6.1	0.93% (60th)	—	no fix	2020-09-16	≤ keycloak 10.0.1
CVE-2020-14359US	high7.3	0.93% (60th)	—	no fix	2021-02-23	≤ all versions as of 2021-02-22
CVE-2020-14389US	high8.1	0.82% (57th)	—	no fix	2020-11-17	≤ before version 12.0.0
CVE-2021-3513US	high7.5	0.80% (56th)	—	no fix	2022-08-22	≤ Fixed in keycloak v13.0.0.
CVE-2020-10776US	medium4.8	0.78% (56th)	—	no fix	2020-11-17	≤ before version 12.0.0
CVE-2021-3424US	medium5.3	0.77% (55th)	—	no fix	2021-06-01	≤ as shipped in Red Hat Single Sign-On 7.4
CVE-2020-1717US	low2.7	0.77% (55th)	—	no fix	2021-02-11	≤ keycloak 7.0.1
CVE-2022-2256US	low3.8	0.70% (53rd)	—	no fix	2022-09-01	≤ keycloak as shipped in Red Hat Single Sign-On 7
CVE-2020-1725US	medium5.4OT elevated	0.69% (53rd)	—	no fix	2021-01-28	≤ keycloak 13.0.0
CVE-2020-27826US	medium4.2	0.57% (47th)	—	no fix	2021-05-28	≤ keycloak 12.0.0
CVE-2023-1664US	medium6.5	0.43% (37th)	—	no fix	2023-05-26	≤ NA
CVE-2022-2237US	medium6.1	0.40% (34th)	—	no fix	2023-03-27	≤ unknown
CVE-2020-35509US	medium5.4	0.35% (29th)	—	no fix	2022-08-23	≤ 11.0.3, 12.0.0
CVE-2021-20262US	medium6.8OT elevated	0.33% (26th)	—	no fix	2021-03-09	≤ Keycloak 12.0.0
CVE-2021-20202US	high7.3	0.30% (22nd)	—	no fix	2021-05-12	≤ keycloak 13.0.0
CVE-2021-3461US	high7.1	0.30% (22nd)	—	no fix	2022-04-01	≤ rh-sso7-keycloak 9.0.13
CVE-2020-10734US	low3.3	0.21% (11th)	—	no fix	2021-02-11	≤ As shipped with Red Hat Fuse 7, Red Hat Single Sign-on 7, and Red Hat Openshift Application Runtimes

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7 CVEs
CWE-287Improper Authentication6 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-295Improper Certificate Validation3 CVEs
CWE-305Authentication Bypass by Primary Weakness3 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')3 CVEs
CWE-863Incorrect Authorization3 CVEs
CWE-209Generation of Error Message Containing Sensitive Information2 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)35 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan