Package · Maven

org.keycloak:keycloak-services

104 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.1

CVE-2026-18963 Public exploit Scanner template

Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypass

A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for a…

Red Hat Red Hat Single Sign-On 7 Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat build of Keycloak 26.6 Wolfi Maven

Aug 18, 2026
Critical 10.0

CVE-2022-4361 Public exploit

Keycloak vulnerable to cross-site scripting when validating URI-schemes on SAML and OIDC

Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the SAML or OIDC providers. The vulnerability can allow an attacker to execute malicious scripts by setting the AssertionConsumerServiceURL val…

Keycloak Keycloak org.keycloak:keycloak-services Maven

Jul 7, 2023