Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2022-2256

A Stored Cross-site scripting (XSS) vulnerability was found in keycloak as shipped in Red Hat Single Sign-On 7. This flaw allows a privileged attacker to execute malicious scripts in the admin console, abusing the default roles functionality.

CVSS v3:

  • Severity: Low
  • Score: 3.8
  • AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
redhat / single_sign-on 7.0 7.0.x
org.keycloak / keycloak-parent - 19.0.2