Vulnerability Database

321,822

Total vulnerabilities in the database

CVE-2025-13881

A flaw was found in Keycloak Admin API. This vulnerability allows an administrator with limited privileges to retrieve sensitive custom attributes via the /unmanagedAttributes endpoint, bypassing User Profile visibility settings.

  • Published: Feb 2, 2026
  • Updated: Feb 3, 2026
  • CVE: CVE-2025-13881
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 2.7
  • AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

CWEs:

No affected software listed.