Maven org.keycloak:keycloak-server-spi-private

Name: Maven org.keycloak:keycloak-server-spi-private
Brand: Maven

productUS

pkg:maven/org.keycloak/keycloak-server-spi-private

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

critical

by severity

0critical2high1medium0low

updated 2026-10-27

vulnerabilities (7)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-10776US	medium4.8	0.78% (56th)	—	12.0.0	2020-11-17	< 12.0.0
CVE-2023-2585US	high8.1	0.69% (53rd)	—	21.1.2	2023-12-21	< 21.1.2
CVE-2026-2603US	—OT elevated	0.44% (38th)	—	26.5.5	2026-03-18	< 26.5.5
CVE-2026-0871US	—	0.35% (28th)	—	26.5.2	2026-02-27	< 26.5.2
CVE-2026-3190US	—	0.33% (25th)	—	26.5.6	2026-03-26	< 26.5.6
CVE-2026-9704US	high8.8	0.32% (25th)	—	26.6.3	2026-05-27	< 26.6.3
CVE-2026-9791US	—OT elevated	0.21% (12th)	—	26.6.3	2026-05-28	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-1284Improper Validation of Specified Quantity in Input1 CVEs
CWE-266Incorrect Privilege Assignment1 CVEs
CWE-280Improper Handling of Insufficient Permissions or Privileges1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-306Missing Authentication for Critical Function1 CVEs
CWE-358Improperly Implemented Security Check for Standard1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs
CWE-863Incorrect Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.