Every CVE Search/ Get API key

CVE-2024-8698

Keycloak-saml-core: improper verification of saml responses leading to privilege escalation in keycloak

7.7 HighPublic exploitFix available

A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for specific assertions based on the position of the signature in the XML document, rather than the Reference element used to specify the signed element. This flaw allows attackers to create crafted responses that can bypass the validation, potentially leading to privilege escalation or impersonation attacks.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
Low
Availability
Low

Exploit likelihood

2.03%Up 1.9 points since Sep 20, 2024
90%50%10%1%

What each source reports

CVE List Score used 7.7

Keycloak-saml-core: improper verification of saml responses leading to privilege escalation in keycloak

A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for specific assertions based on the position of the signature in the XML document, rather than the Reference element used to specify the signed element. This flaw allows attackers to create crafted responses that can bypass the validation, potentially leading to privilege escalation or impersonation attacks.

Record
CVE-2024-8698
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L
Weakness
CWE-347
Updated
2026-11-02
EUVDEUVD-2024-3168 7.7

A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for specific assertions based on the position of the signature in the XML document, rather than the Reference element used to specify the signed element. This flaw allows attackers to create crafted responses that can bypass the validation, potentially leading to privilege escalation or impersonation attacks.

Record
EUVD-2024-3168
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L
Updated
2026-11-02
GitHub AdvisoriesGHSA-xgfv-xpx8-qhcr 7.7

Improper Verification of SAML Responses Leading to Privilege Escalation in Keycloak

A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for specific assertions based on the position of the signature in the XML document, rather than the Reference element used to specify the signed element. This flaw allows attackers to create crafted responses that can bypass the validation, potentially leading to privilege escalation or impersonation attacks.

Record
GHSA-xgfv-xpx8-qhcr
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L
Weakness
CWE-347
Updated
2026-11-02
NVD 7.7

A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for specific assertions based on the position of the signature in the XML document, rather than the Reference element used to specify the signed element. This flaw allows attackers to create crafted responses that can bypass the validation, potentially leading to privilege escalation or impersonation attacks.

Record
CVE-2024-8698
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L
Weakness
CWE-347
Updated
2026-11-02
OSV 7.7

Keycloak-saml-core: improper verification of saml responses leading to privilege escalation in keycloak

A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for specific assertions based on the position of the signature in the XML document, rather than the Reference element used to specify the signed element. This flaw allows attackers to create crafted responses that can bypass the validation, potentially leading to privilege escalation or impersonation attacks.

Record
CVE-2024-8698
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L
Weakness
CWE-347
Updated
2026-11-02
OSVGHSA-xgfv-xpx8-qhcr 7.7

Improper Verification of SAML Responses Leading to Privilege Escalation in Keycloak

A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for specific assertions based on the position of the signature in the XML document, rather than the Reference element used to specify the signed element. This flaw allows attackers to create crafted responses that can bypass the validation, potentially leading to privilege escalation or impersonation attacks.

Record
GHSA-xgfv-xpx8-qhcr
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L
Weakness
CWE-347
Updated
2026-11-02
Show 5 moreShow less
OSVRHSA-2024:6878 7.7

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.11 security update on RHEL 7

Record
RHSA-2024:6878
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2024:6879 7.7

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.11 security update on RHEL 8

Record
RHSA-2024:6879
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2024:6880 7.7

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.11 security update on RHEL 9

Record
RHSA-2024:6880
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2024:8823 7.7

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.4 Security update

Record
RHSA-2024:8823
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2024:8824 7.7

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.4 Security update

Record
RHSA-2024:8824
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
org.keycloak:keycloak-saml-core
Maven
 through 22.0.12
22.0.13
org.keycloak:keycloak-saml-core
Maven
 23.0.0 to 24.0.7
24.0.8
org.keycloak:keycloak-saml-core
Maven
 25.0.0 to 25.0.5
25.0.6
org.keycloak:keycloak-saml-core
Maven
 before 22.0.13, plus listed versions
1.1.0.Beta11.1.0.Beta21.1.0.Final1.1.1.Final1.2.0.Beta1
Show 45 moreShow less
1.2.0.CR11.2.0.Final1.3.0.Final1.3.1.Final1.4.0.Final1.5.0-Final1.5.0.Final1.5.1.Final1.6.0.Final1.6.1.Final1.7.0.CR11.7.0.Final1.8.0.Alpha11.8.0.CR11.8.0.CR21.8.0.CR31.8.0.Final1.8.1.Final1.9.0.CR11.9.0.Final1.9.1.Final1.9.2.Final1.9.3.Final1.9.4.Final1.9.5.Final1.9.7.Final1.9.8.Final10.0.010.0.110.0.211.0.011.0.111.0.211.0.312.0.012.0.112.0.212.0.312.0.413.0.013.0.114.0.015.0.015.0.115.0.2
22.0.13
org.keycloak:keycloak-saml-core
Maven
 23.0.0 up to 24.0.8, plus listed versions
23.0.123.0.223.0.323.0.423.0.5
Show 8 moreShow less
23.0.623.0.724.0.024.0.124.0.224.0.324.0.424.0.5
24.0.8
org.keycloak:keycloak-saml-core
Maven
 25.0.0 up to 25.0.6, plus listed versions
25.0.125.0.225.0.325.0.425.0.5
25.0.6
rh-sso7-keycloak
Red Hat:red_hat_single_sign_on:7.6::el7
From an advisory covering 2 CVEs
 before 0:18.0.18-1.redhat_00001.1.el7sso
0:18.0.18-1.redhat_00001.1.el7sso
rh-sso7-keycloak-server
Red Hat:red_hat_single_sign_on:7.6::el7
From an advisory covering 2 CVEs
 before 0:18.0.18-1.redhat_00001.1.el7sso
0:18.0.18-1.redhat_00001.1.el7sso
rh-sso7-keycloak
Red Hat:red_hat_single_sign_on:7.6::el8
From an advisory covering 2 CVEs
 before 0:18.0.18-1.redhat_00001.1.el8sso
0:18.0.18-1.redhat_00001.1.el8sso
rh-sso7-keycloak-server
Red Hat:red_hat_single_sign_on:7.6::el8
From an advisory covering 2 CVEs
 before 0:18.0.18-1.redhat_00001.1.el8sso
0:18.0.18-1.redhat_00001.1.el8sso
Show 162 moreShow less
Affected packages
PackageAffectedFixed
rh-sso7-keycloak
Red Hat:red_hat_single_sign_on:7.6::el9
From an advisory covering 2 CVEs
 before 0:18.0.18-1.redhat_00001.1.el9sso
0:18.0.18-1.redhat_00001.1.el9sso
rh-sso7-keycloak-server
Red Hat:red_hat_single_sign_on:7.6::el9
From an advisory covering 2 CVEs
 before 0:18.0.18-1.redhat_00001.1.el9sso
0:18.0.18-1.redhat_00001.1.el9sso
eap8-activemq-artemis
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-cli
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-commons
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-core-client
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-dto
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-hornetq-protocol
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-hqclient-protocol
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-jakarta-client
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-jakarta-ra
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-jakarta-server
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-jakarta-service-extensions
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-jdbc-store
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-journal
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-native
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 1:2.0.0-2.redhat_00005.1.el8eap
1:2.0.0-2.redhat_00005.1.el8eap
eap8-activemq-artemis-selector
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-server
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-aesh-extensions
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.8.0-2.redhat_00001.1.el8eap
0:1.8.0-2.redhat_00001.1.el8eap
eap8-aesh-readline
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.2.0-2.redhat_00001.1.el8eap
0:2.2.0-2.redhat_00001.1.el8eap
eap8-apache-commons-codec
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.16.1-2.redhat_00007.1.el8eap
0:1.16.1-2.redhat_00007.1.el8eap
eap8-apache-commons-collections
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:3.2.2-28.redhat_2.1.el8eap
0:3.2.2-28.redhat_2.1.el8eap
eap8-apache-commons-io
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.15.1-1.redhat_00001.1.el8eap
0:2.15.1-1.redhat_00001.1.el8eap
eap8-apache-commons-lang
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:3.14.0-2.redhat_00006.1.el8eap
0:3.14.0-2.redhat_00006.1.el8eap
eap8-apache-cxf
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el8eap
0:4.0.5-1.redhat_00001.1.el8eap
eap8-apache-cxf-rt
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el8eap
0:4.0.5-1.redhat_00001.1.el8eap
eap8-apache-cxf-services
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el8eap
0:4.0.5-1.redhat_00001.1.el8eap
eap8-apache-cxf-tools
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el8eap
0:4.0.5-1.redhat_00001.1.el8eap
eap8-artemis-native
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 1:2.0.0-2.redhat_00005.1.el8eap
1:2.0.0-2.redhat_00005.1.el8eap
eap8-artemis-native-wildfly
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 1:2.0.0-2.redhat_00005.1.el8eap
1:2.0.0-2.redhat_00005.1.el8eap
eap8-artemis-wildfly-integration
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.0.1-1.redhat_00002.1.el8eap
0:2.0.1-1.redhat_00002.1.el8eap
eap8-asyncutil
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:0.1.0-2.redhat_00010.1.el8eap
0:0.1.0-2.redhat_00010.1.el8eap
eap8-aws-java-sdk
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el8eap
0:1.12.284-2.redhat_00002.1.el8eap
eap8-aws-java-sdk-core
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el8eap
0:1.12.284-2.redhat_00002.1.el8eap
eap8-aws-java-sdk-kms
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el8eap
0:1.12.284-2.redhat_00002.1.el8eap
eap8-aws-java-sdk-s3
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el8eap
0:1.12.284-2.redhat_00002.1.el8eap
eap8-cryptacular
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.2.5-2.redhat_00001.1.el8eap
0:1.2.5-2.redhat_00001.1.el8eap
eap8-eap-product-conf-parent
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:800.4.0-1.GA_redhat_00001.1.el8eap
0:800.4.0-1.GA_redhat_00001.1.el8eap
eap8-eap-product-conf-wildfly-ee-feature-pack
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:800.4.0-1.GA_redhat_00001.1.el8eap
0:800.4.0-1.GA_redhat_00001.1.el8eap
eap8-fastinfoset
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.1.0-4.redhat_00001.1.el8eap
0:2.1.0-4.redhat_00001.1.el8eap
eap8-hibernate
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.2.31-1.Final_redhat_00002.1.el8eap
0:6.2.31-1.Final_redhat_00002.1.el8eap
eap8-hibernate-core
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.2.31-1.Final_redhat_00002.1.el8eap
0:6.2.31-1.Final_redhat_00002.1.el8eap
eap8-hibernate-envers
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.2.31-1.Final_redhat_00002.1.el8eap
0:6.2.31-1.Final_redhat_00002.1.el8eap
eap8-hibernate-validator
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.1-3.Final_redhat_00001.1.el8eap
0:8.0.1-3.Final_redhat_00001.1.el8eap
eap8-hibernate-validator-cdi
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.1-3.Final_redhat_00001.1.el8eap
0:8.0.1-3.Final_redhat_00001.1.el8eap
eap8-hppc
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:0.8.1-2.redhat_00001.1.el8eap
0:0.8.1-2.redhat_00001.1.el8eap
eap8-insights-java-client
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.1.3-1.redhat_00001.1.el8eap
0:1.1.3-1.redhat_00001.1.el8eap
eap8-jakarta-servlet-jsp-jstl
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:3.0.1-1.redhat_00001.1.el8eap
0:3.0.1-1.redhat_00001.1.el8eap
eap8-jakarta-servlet-jsp-jstl-api
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:3.0.1-1.redhat_00001.1.el8eap
0:3.0.1-1.redhat_00001.1.el8eap
eap8-jboss-cert-helper
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.1.3-1.redhat_00001.1.el8eap
0:1.1.3-1.redhat_00001.1.el8eap
eap8-jboss-logging
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:3.5.3-1.Final_redhat_00001.1.el8eap
0:3.5.3-1.Final_redhat_00001.1.el8eap
eap8-jctools
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:4.0.2-1.redhat_00001.1.el8eap
0:4.0.2-1.redhat_00001.1.el8eap
eap8-jctools-core
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:4.0.2-1.redhat_00001.1.el8eap
0:4.0.2-1.redhat_00001.1.el8eap
eap8-jgroups
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:5.3.10-1.Final_redhat_00001.1.el8eap
0:5.3.10-1.Final_redhat_00001.1.el8eap
eap8-jmespath-java
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el8eap
0:1.12.284-2.redhat_00002.1.el8eap
eap8-log4j
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.22.1-1.redhat_00002.1.el8eap
0:2.22.1-1.redhat_00002.1.el8eap
eap8-narayana
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-jbosstxbridge
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-jbossxts
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-jts-idlj
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-jts-integration
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-restat-api
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-restat-bridge
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-restat-integration
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-restat-util
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-nimbus-jose-jwt
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:9.37.3-1.redhat_00001.1.el8eap
0:9.37.3-1.redhat_00001.1.el8eap
eap8-objectweb-asm
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:9.6.0-1.redhat_00002.1.el8eap
0:9.6.0-1.redhat_00002.1.el8eap
eap8-objectweb-asm-util
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:9.6.0-1.redhat_00002.1.el8eap
0:9.6.0-1.redhat_00002.1.el8eap
eap8-pem-keystore
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.3.0-1.redhat_00001.1.el8eap
0:2.3.0-1.redhat_00001.1.el8eap
eap8-resteasy-extensions
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.0.1-3.Final_redhat_00001.1.el8eap
0:2.0.1-3.Final_redhat_00001.1.el8eap
eap8-resteasy-spring
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:3.0.1-2.Final_redhat_00001.1.el8eap
0:3.0.1-2.Final_redhat_00001.1.el8eap
eap8-resteasy-tracing-api
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.0.1-3.Final_redhat_00001.1.el8eap
0:2.0.1-3.Final_redhat_00001.1.el8eap
eap8-saaj-impl
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:3.0.4-1.redhat_00001.1.el8eap
0:3.0.4-1.redhat_00001.1.el8eap
eap8-shibboleth-java-support
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.0-6.redhat_00001.1.el8eap
0:8.0.0-6.redhat_00001.1.el8eap
eap8-slf4j
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.0.16-1.redhat_00001.1.el8eap
0:2.0.16-1.redhat_00001.1.el8eap
eap8-slf4j-api
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.0.16-1.redhat_00001.1.el8eap
0:2.0.16-1.redhat_00001.1.el8eap
eap8-snakeyaml
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.2.0-1.redhat_00001.1.el8eap
0:2.2.0-1.redhat_00001.1.el8eap
eap8-wildfly
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el8eap
0:8.0.4-2.GA_redhat_00005.1.el8eap
eap8-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el8eap
0:8.0.4-2.GA_redhat_00005.1.el8eap
eap8-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el8eap
0:8.0.4-2.GA_redhat_00005.1.el8eap
eap8-wildfly-java-jdk21
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el8eap
0:8.0.4-2.GA_redhat_00005.1.el8eap
eap8-wildfly-modules
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el8eap
0:8.0.4-2.GA_redhat_00005.1.el8eap
eap8-activemq-artemis
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-cli
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-commons
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-core-client
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-dto
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-hornetq-protocol
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-hqclient-protocol
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-jakarta-client
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-jakarta-ra
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-jakarta-server
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-jakarta-service-extensions
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-jdbc-store
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-journal
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-native
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 1:2.0.0-2.redhat_00005.1.el9eap
1:2.0.0-2.redhat_00005.1.el9eap
eap8-activemq-artemis-selector
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-server
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-aesh-extensions
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.8.0-2.redhat_00001.1.el9eap
0:1.8.0-2.redhat_00001.1.el9eap
eap8-aesh-readline
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.2.0-2.redhat_00001.1.el9eap
0:2.2.0-2.redhat_00001.1.el9eap
eap8-apache-commons-codec
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.16.1-2.redhat_00007.1.el9eap
0:1.16.1-2.redhat_00007.1.el9eap
eap8-apache-commons-collections
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:3.2.2-28.redhat_2.1.el9eap
0:3.2.2-28.redhat_2.1.el9eap
eap8-apache-commons-io
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.15.1-1.redhat_00001.1.el9eap
0:2.15.1-1.redhat_00001.1.el9eap
eap8-apache-commons-lang
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:3.14.0-2.redhat_00006.1.el9eap
0:3.14.0-2.redhat_00006.1.el9eap
eap8-apache-cxf
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el9eap
0:4.0.5-1.redhat_00001.1.el9eap
eap8-apache-cxf-rt
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el9eap
0:4.0.5-1.redhat_00001.1.el9eap
eap8-apache-cxf-services
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el9eap
0:4.0.5-1.redhat_00001.1.el9eap
eap8-apache-cxf-tools
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el9eap
0:4.0.5-1.redhat_00001.1.el9eap
eap8-artemis-native
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 1:2.0.0-2.redhat_00005.1.el9eap
1:2.0.0-2.redhat_00005.1.el9eap
eap8-artemis-native-wildfly
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 1:2.0.0-2.redhat_00005.1.el9eap
1:2.0.0-2.redhat_00005.1.el9eap
eap8-artemis-wildfly-integration
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.0.1-1.redhat_00002.1.el9eap
0:2.0.1-1.redhat_00002.1.el9eap
eap8-asyncutil
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:0.1.0-2.redhat_00010.1.el9eap
0:0.1.0-2.redhat_00010.1.el9eap
eap8-aws-java-sdk
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el9eap
0:1.12.284-2.redhat_00002.1.el9eap
eap8-aws-java-sdk-core
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el9eap
0:1.12.284-2.redhat_00002.1.el9eap
eap8-aws-java-sdk-kms
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el9eap
0:1.12.284-2.redhat_00002.1.el9eap
eap8-aws-java-sdk-s3
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el9eap
0:1.12.284-2.redhat_00002.1.el9eap
eap8-cryptacular
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.2.5-2.redhat_00001.1.el9eap
0:1.2.5-2.redhat_00001.1.el9eap
eap8-eap-product-conf-parent
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:800.4.0-1.GA_redhat_00001.1.el9eap
0:800.4.0-1.GA_redhat_00001.1.el9eap
eap8-eap-product-conf-wildfly-ee-feature-pack
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:800.4.0-1.GA_redhat_00001.1.el9eap
0:800.4.0-1.GA_redhat_00001.1.el9eap
eap8-fastinfoset
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.1.0-4.redhat_00001.1.el9eap
0:2.1.0-4.redhat_00001.1.el9eap
eap8-hibernate
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.2.31-1.Final_redhat_00002.1.el9eap
0:6.2.31-1.Final_redhat_00002.1.el9eap
eap8-hibernate-core
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.2.31-1.Final_redhat_00002.1.el9eap
0:6.2.31-1.Final_redhat_00002.1.el9eap
eap8-hibernate-envers
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.2.31-1.Final_redhat_00002.1.el9eap
0:6.2.31-1.Final_redhat_00002.1.el9eap
eap8-hibernate-validator
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.1-3.Final_redhat_00001.1.el9eap
0:8.0.1-3.Final_redhat_00001.1.el9eap
eap8-hibernate-validator-cdi
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.1-3.Final_redhat_00001.1.el9eap
0:8.0.1-3.Final_redhat_00001.1.el9eap
eap8-hppc
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:0.8.1-2.redhat_00001.1.el9eap
0:0.8.1-2.redhat_00001.1.el9eap
eap8-insights-java-client
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.1.3-1.redhat_00001.1.el9eap
0:1.1.3-1.redhat_00001.1.el9eap
eap8-jakarta-servlet-jsp-jstl
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:3.0.1-1.redhat_00001.1.el9eap
0:3.0.1-1.redhat_00001.1.el9eap
eap8-jakarta-servlet-jsp-jstl-api
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:3.0.1-1.redhat_00001.1.el9eap
0:3.0.1-1.redhat_00001.1.el9eap
eap8-jboss-cert-helper
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.1.3-1.redhat_00001.1.el9eap
0:1.1.3-1.redhat_00001.1.el9eap
eap8-jboss-logging
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:3.5.3-1.Final_redhat_00001.1.el9eap
0:3.5.3-1.Final_redhat_00001.1.el9eap
eap8-jctools
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:4.0.2-1.redhat_00001.1.el9eap
0:4.0.2-1.redhat_00001.1.el9eap
eap8-jctools-core
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:4.0.2-1.redhat_00001.1.el9eap
0:4.0.2-1.redhat_00001.1.el9eap
eap8-jgroups
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:5.3.10-1.Final_redhat_00001.1.el9eap
0:5.3.10-1.Final_redhat_00001.1.el9eap
eap8-jmespath-java
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el9eap
0:1.12.284-2.redhat_00002.1.el9eap
eap8-log4j
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.22.1-1.redhat_00002.1.el9eap
0:2.22.1-1.redhat_00002.1.el9eap
eap8-narayana
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-jbosstxbridge
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-jbossxts
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-jts-idlj
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-jts-integration
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-restat-api
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-restat-bridge
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-restat-integration
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-restat-util
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-nimbus-jose-jwt
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:9.37.3-1.redhat_00001.1.el9eap
0:9.37.3-1.redhat_00001.1.el9eap
eap8-objectweb-asm
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:9.6.0-1.redhat_00002.1.el9eap
0:9.6.0-1.redhat_00002.1.el9eap
eap8-objectweb-asm-util
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:9.6.0-1.redhat_00002.1.el9eap
0:9.6.0-1.redhat_00002.1.el9eap
eap8-pem-keystore
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.3.0-1.redhat_00001.1.el9eap
0:2.3.0-1.redhat_00001.1.el9eap
eap8-resteasy-extensions
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.0.1-3.Final_redhat_00001.1.el9eap
0:2.0.1-3.Final_redhat_00001.1.el9eap
eap8-resteasy-spring
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:3.0.1-2.Final_redhat_00001.1.el9eap
0:3.0.1-2.Final_redhat_00001.1.el9eap
eap8-resteasy-tracing-api
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.0.1-3.Final_redhat_00001.1.el9eap
0:2.0.1-3.Final_redhat_00001.1.el9eap
eap8-saaj-impl
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:3.0.4-1.redhat_00001.1.el9eap
0:3.0.4-1.redhat_00001.1.el9eap
eap8-shibboleth-java-support
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.0-6.redhat_00001.1.el9eap
0:8.0.0-6.redhat_00001.1.el9eap
eap8-slf4j
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.0.16-1.redhat_00001.1.el9eap
0:2.0.16-1.redhat_00001.1.el9eap
eap8-slf4j-api
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.0.16-1.redhat_00001.1.el9eap
0:2.0.16-1.redhat_00001.1.el9eap
eap8-snakeyaml
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.2.0-1.redhat_00001.1.el9eap
0:2.2.0-1.redhat_00001.1.el9eap
eap8-wildfly
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el9eap
0:8.0.4-2.GA_redhat_00005.1.el9eap
eap8-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el9eap
0:8.0.4-2.GA_redhat_00005.1.el9eap
eap8-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el9eap
0:8.0.4-2.GA_redhat_00005.1.el9eap
eap8-wildfly-java-jdk21
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el9eap
0:8.0.4-2.GA_redhat_00005.1.el9eap
eap8-wildfly-modules
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el9eap
0:8.0.4-2.GA_redhat_00005.1.el9eap

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubhuydoppaz/CVE-2024-8698-POC2024-10-10
NucleiKeycloak - SAML Core Package Signature Validation Flaw

History

History
RecordedChangedSources
affected, exploits, facts
first indexedCVE List, EUVD, GitHub Advisories, Nuclei, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-8698 is a high vulnerability (CVSS 7.7) in Red Hat Build Of Keycloak, published September 19, 2024. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.03%, the 81st percentile. Fixed in org.keycloak:keycloak-saml-core 22.0.13.

References

Show 75 moreShow less
This page doesn't list everything

Left out here: 91 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open