Every CVE Search/ Get API key

CVE-2024-8883

Keycloak: vulnerable redirect uri validation results in open redirec

6.1 MediumFix available

A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost or http://127.0.0.1, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially leading to session hijacking.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
None

Exploit likelihood

2.11%Up 2.0 points since Sep 20, 2024
90%50%10%1%

What each source reports

CVE List Score used 6.1

Keycloak: vulnerable redirect uri validation results in open redirec

A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost or http://127.0.0.1, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially leading to session hijacking.

Record
CVE-2024-8883
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-601
Updated
2026-11-03
EUVDEUVD-2024-3152 6.1

A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost or http://127.0.0.1, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially leading to session hijacking.

Record
EUVD-2024-3152
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-03
GitHub AdvisoriesGHSA-w8gr-xwp4-r9f7 6.1

Keycloak has Vulnerable Redirect URI Validation Results in Open Redirect

A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost/ or http://127.0.0.1/, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially leading to session hijacking.

Record
GHSA-w8gr-xwp4-r9f7
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-601
Updated
2026-11-02
NVD 6.1

A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost or http://127.0.0.1, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially leading to session hijacking.

Record
CVE-2024-8883
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-601
Updated
2026-11-02
OSV 6.1

Keycloak: vulnerable redirect uri validation results in open redirec

A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost or http://127.0.0.1, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially leading to session hijacking.

Record
CVE-2024-8883
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-601
Updated
2026-11-04
OSVGHSA-w8gr-xwp4-r9f7 6.1

Keycloak has Vulnerable Redirect URI Validation Results in Open Redirect

A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost/ or http://127.0.0.1/, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially leading to session hijacking.

Record
GHSA-w8gr-xwp4-r9f7
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-601
Updated
2026-11-02
Show 6 moreShow less
OSVRHSA-2024:10386 6.1

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0 update

Record
RHSA-2024:10386
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2024:6878 7.7

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.11 security update on RHEL 7

Record
RHSA-2024:6878
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2024:6879 7.7

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.11 security update on RHEL 8

Record
RHSA-2024:6879
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2024:6880 7.7

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.11 security update on RHEL 9

Record
RHSA-2024:6880
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2024:8823 7.7

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.4 Security update

Record
RHSA-2024:8823
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2024:8824 7.7

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.4 Security update

Record
RHSA-2024:8824
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L
Updated
2026-11-02

Affected products

Show 5 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
org.keycloak:keycloak-services
Maven
 through 22.0.12
22.0.13
org.keycloak:keycloak-services
Maven
 23.0.0 to 24.0.7
24.0.8
org.keycloak:keycloak-services
Maven
 25.0.0 to 25.0.5
25.0.6
org.keycloak:keycloak-services
Maven
 before 22.0.13, plus listed versions
1.0-alpha-11.0-alpha-1-120620131.0-alpha-21.0-alpha-31.0-alpha-4
Show 45 moreShow less
1.0-beta-11.0-beta-1-201505211.0-beta-1-201505231.0-beta-21.0-beta-31.0-beta-41.0-final1.0-rc-11.0-rc-21.0.1.Final1.0.2.Final1.0.3.Final1.0.4.Final1.0.5.Final1.1.0.Beta11.1.0.Beta21.1.0.Final1.1.1.Final1.2.0.Beta11.2.0.CR11.2.0.Final1.3.0.Final1.3.1.Final1.4.0.Final1.5.0-Final1.5.0.Final1.5.1.Final1.6.0.Final1.6.1.Final1.7.0.CR11.7.0.Final1.8.0.Alpha11.8.0.CR11.8.0.CR21.8.0.CR31.8.0.Final1.8.1.Final1.9.0.CR11.9.0.Final1.9.1.Final1.9.2.Final1.9.3.Final1.9.4.Final1.9.5.Final1.9.7.Final
22.0.13
org.keycloak:keycloak-services
Maven
 23.0.0 up to 24.0.8, plus listed versions
23.0.123.0.223.0.323.0.423.0.5
Show 8 moreShow less
23.0.623.0.724.0.024.0.124.0.224.0.324.0.424.0.5
24.0.8
org.keycloak:keycloak-services
Maven
 25.0.0 up to 25.0.6, plus listed versions
25.0.125.0.225.0.325.0.425.0.5
25.0.6
eap8-eap-product-conf-parent
Red Hat:jboss_enterprise_application_platform:8.0::el8
 before 0:800.4.1-1.GA_redhat_00001.1.el8eap
0:800.4.1-1.GA_redhat_00001.1.el8eap
eap8-eap-product-conf-wildfly-ee-feature-pack
Red Hat:jboss_enterprise_application_platform:8.0::el8
 before 0:800.4.1-1.GA_redhat_00001.1.el8eap
0:800.4.1-1.GA_redhat_00001.1.el8eap
eap8-wildfly
Red Hat:jboss_enterprise_application_platform:8.0::el8
 before 0:8.0.4-3.GA_redhat_00007.1.el8eap
0:8.0.4-3.GA_redhat_00007.1.el8eap
eap8-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:8.0::el8
 before 0:8.0.4-3.GA_redhat_00007.1.el8eap
0:8.0.4-3.GA_redhat_00007.1.el8eap
Show 176 moreShow less
Affected packages
PackageAffectedFixed
eap8-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform:8.0::el8
 before 0:8.0.4-3.GA_redhat_00007.1.el8eap
0:8.0.4-3.GA_redhat_00007.1.el8eap
eap8-wildfly-java-jdk21
Red Hat:jboss_enterprise_application_platform:8.0::el8
 before 0:8.0.4-3.GA_redhat_00007.1.el8eap
0:8.0.4-3.GA_redhat_00007.1.el8eap
eap8-wildfly-modules
Red Hat:jboss_enterprise_application_platform:8.0::el8
 before 0:8.0.4-3.GA_redhat_00007.1.el8eap
0:8.0.4-3.GA_redhat_00007.1.el8eap
eap8-eap-product-conf-parent
Red Hat:jboss_enterprise_application_platform:8.0::el9
 before 0:800.4.1-1.GA_redhat_00001.1.el9eap
0:800.4.1-1.GA_redhat_00001.1.el9eap
eap8-eap-product-conf-wildfly-ee-feature-pack
Red Hat:jboss_enterprise_application_platform:8.0::el9
 before 0:800.4.1-1.GA_redhat_00001.1.el9eap
0:800.4.1-1.GA_redhat_00001.1.el9eap
eap8-wildfly
Red Hat:jboss_enterprise_application_platform:8.0::el9
 before 0:8.0.4-3.GA_redhat_00007.1.el9eap
0:8.0.4-3.GA_redhat_00007.1.el9eap
eap8-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:8.0::el9
 before 0:8.0.4-3.GA_redhat_00007.1.el9eap
0:8.0.4-3.GA_redhat_00007.1.el9eap
eap8-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform:8.0::el9
 before 0:8.0.4-3.GA_redhat_00007.1.el9eap
0:8.0.4-3.GA_redhat_00007.1.el9eap
eap8-wildfly-java-jdk21
Red Hat:jboss_enterprise_application_platform:8.0::el9
 before 0:8.0.4-3.GA_redhat_00007.1.el9eap
0:8.0.4-3.GA_redhat_00007.1.el9eap
eap8-wildfly-modules
Red Hat:jboss_enterprise_application_platform:8.0::el9
 before 0:8.0.4-3.GA_redhat_00007.1.el9eap
0:8.0.4-3.GA_redhat_00007.1.el9eap
rh-sso7-keycloak
Red Hat:red_hat_single_sign_on:7.6::el7
From an advisory covering 2 CVEs
 before 0:18.0.18-1.redhat_00001.1.el7sso
0:18.0.18-1.redhat_00001.1.el7sso
rh-sso7-keycloak-server
Red Hat:red_hat_single_sign_on:7.6::el7
From an advisory covering 2 CVEs
 before 0:18.0.18-1.redhat_00001.1.el7sso
0:18.0.18-1.redhat_00001.1.el7sso
rh-sso7-keycloak
Red Hat:red_hat_single_sign_on:7.6::el8
From an advisory covering 2 CVEs
 before 0:18.0.18-1.redhat_00001.1.el8sso
0:18.0.18-1.redhat_00001.1.el8sso
rh-sso7-keycloak-server
Red Hat:red_hat_single_sign_on:7.6::el8
From an advisory covering 2 CVEs
 before 0:18.0.18-1.redhat_00001.1.el8sso
0:18.0.18-1.redhat_00001.1.el8sso
rh-sso7-keycloak
Red Hat:red_hat_single_sign_on:7.6::el9
From an advisory covering 2 CVEs
 before 0:18.0.18-1.redhat_00001.1.el9sso
0:18.0.18-1.redhat_00001.1.el9sso
rh-sso7-keycloak-server
Red Hat:red_hat_single_sign_on:7.6::el9
From an advisory covering 2 CVEs
 before 0:18.0.18-1.redhat_00001.1.el9sso
0:18.0.18-1.redhat_00001.1.el9sso
eap8-activemq-artemis
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-cli
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-commons
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-core-client
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-dto
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-hornetq-protocol
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-hqclient-protocol
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-jakarta-client
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-jakarta-ra
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-jakarta-server
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-jakarta-service-extensions
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-jdbc-store
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-journal
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-native
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 1:2.0.0-2.redhat_00005.1.el8eap
1:2.0.0-2.redhat_00005.1.el8eap
eap8-activemq-artemis-selector
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-server
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-aesh-extensions
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.8.0-2.redhat_00001.1.el8eap
0:1.8.0-2.redhat_00001.1.el8eap
eap8-aesh-readline
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.2.0-2.redhat_00001.1.el8eap
0:2.2.0-2.redhat_00001.1.el8eap
eap8-apache-commons-codec
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.16.1-2.redhat_00007.1.el8eap
0:1.16.1-2.redhat_00007.1.el8eap
eap8-apache-commons-collections
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:3.2.2-28.redhat_2.1.el8eap
0:3.2.2-28.redhat_2.1.el8eap
eap8-apache-commons-io
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.15.1-1.redhat_00001.1.el8eap
0:2.15.1-1.redhat_00001.1.el8eap
eap8-apache-commons-lang
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:3.14.0-2.redhat_00006.1.el8eap
0:3.14.0-2.redhat_00006.1.el8eap
eap8-apache-cxf
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el8eap
0:4.0.5-1.redhat_00001.1.el8eap
eap8-apache-cxf-rt
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el8eap
0:4.0.5-1.redhat_00001.1.el8eap
eap8-apache-cxf-services
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el8eap
0:4.0.5-1.redhat_00001.1.el8eap
eap8-apache-cxf-tools
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el8eap
0:4.0.5-1.redhat_00001.1.el8eap
eap8-artemis-native
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 1:2.0.0-2.redhat_00005.1.el8eap
1:2.0.0-2.redhat_00005.1.el8eap
eap8-artemis-native-wildfly
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 1:2.0.0-2.redhat_00005.1.el8eap
1:2.0.0-2.redhat_00005.1.el8eap
eap8-artemis-wildfly-integration
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.0.1-1.redhat_00002.1.el8eap
0:2.0.1-1.redhat_00002.1.el8eap
eap8-asyncutil
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:0.1.0-2.redhat_00010.1.el8eap
0:0.1.0-2.redhat_00010.1.el8eap
eap8-aws-java-sdk
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el8eap
0:1.12.284-2.redhat_00002.1.el8eap
eap8-aws-java-sdk-core
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el8eap
0:1.12.284-2.redhat_00002.1.el8eap
eap8-aws-java-sdk-kms
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el8eap
0:1.12.284-2.redhat_00002.1.el8eap
eap8-aws-java-sdk-s3
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el8eap
0:1.12.284-2.redhat_00002.1.el8eap
eap8-cryptacular
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.2.5-2.redhat_00001.1.el8eap
0:1.2.5-2.redhat_00001.1.el8eap
eap8-eap-product-conf-parent
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:800.4.0-1.GA_redhat_00001.1.el8eap
0:800.4.0-1.GA_redhat_00001.1.el8eap
eap8-eap-product-conf-wildfly-ee-feature-pack
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:800.4.0-1.GA_redhat_00001.1.el8eap
0:800.4.0-1.GA_redhat_00001.1.el8eap
eap8-fastinfoset
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.1.0-4.redhat_00001.1.el8eap
0:2.1.0-4.redhat_00001.1.el8eap
eap8-hibernate
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.2.31-1.Final_redhat_00002.1.el8eap
0:6.2.31-1.Final_redhat_00002.1.el8eap
eap8-hibernate-core
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.2.31-1.Final_redhat_00002.1.el8eap
0:6.2.31-1.Final_redhat_00002.1.el8eap
eap8-hibernate-envers
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.2.31-1.Final_redhat_00002.1.el8eap
0:6.2.31-1.Final_redhat_00002.1.el8eap
eap8-hibernate-validator
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.1-3.Final_redhat_00001.1.el8eap
0:8.0.1-3.Final_redhat_00001.1.el8eap
eap8-hibernate-validator-cdi
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.1-3.Final_redhat_00001.1.el8eap
0:8.0.1-3.Final_redhat_00001.1.el8eap
eap8-hppc
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:0.8.1-2.redhat_00001.1.el8eap
0:0.8.1-2.redhat_00001.1.el8eap
eap8-insights-java-client
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.1.3-1.redhat_00001.1.el8eap
0:1.1.3-1.redhat_00001.1.el8eap
eap8-jakarta-servlet-jsp-jstl
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:3.0.1-1.redhat_00001.1.el8eap
0:3.0.1-1.redhat_00001.1.el8eap
eap8-jakarta-servlet-jsp-jstl-api
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:3.0.1-1.redhat_00001.1.el8eap
0:3.0.1-1.redhat_00001.1.el8eap
eap8-jboss-cert-helper
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.1.3-1.redhat_00001.1.el8eap
0:1.1.3-1.redhat_00001.1.el8eap
eap8-jboss-logging
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:3.5.3-1.Final_redhat_00001.1.el8eap
0:3.5.3-1.Final_redhat_00001.1.el8eap
eap8-jctools
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:4.0.2-1.redhat_00001.1.el8eap
0:4.0.2-1.redhat_00001.1.el8eap
eap8-jctools-core
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:4.0.2-1.redhat_00001.1.el8eap
0:4.0.2-1.redhat_00001.1.el8eap
eap8-jgroups
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:5.3.10-1.Final_redhat_00001.1.el8eap
0:5.3.10-1.Final_redhat_00001.1.el8eap
eap8-jmespath-java
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el8eap
0:1.12.284-2.redhat_00002.1.el8eap
eap8-log4j
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.22.1-1.redhat_00002.1.el8eap
0:2.22.1-1.redhat_00002.1.el8eap
eap8-narayana
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-jbosstxbridge
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-jbossxts
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-jts-idlj
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-jts-integration
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-restat-api
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-restat-bridge
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-restat-integration
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-restat-util
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-nimbus-jose-jwt
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:9.37.3-1.redhat_00001.1.el8eap
0:9.37.3-1.redhat_00001.1.el8eap
eap8-objectweb-asm
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:9.6.0-1.redhat_00002.1.el8eap
0:9.6.0-1.redhat_00002.1.el8eap
eap8-objectweb-asm-util
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:9.6.0-1.redhat_00002.1.el8eap
0:9.6.0-1.redhat_00002.1.el8eap
eap8-pem-keystore
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.3.0-1.redhat_00001.1.el8eap
0:2.3.0-1.redhat_00001.1.el8eap
eap8-resteasy-extensions
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.0.1-3.Final_redhat_00001.1.el8eap
0:2.0.1-3.Final_redhat_00001.1.el8eap
eap8-resteasy-spring
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:3.0.1-2.Final_redhat_00001.1.el8eap
0:3.0.1-2.Final_redhat_00001.1.el8eap
eap8-resteasy-tracing-api
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.0.1-3.Final_redhat_00001.1.el8eap
0:2.0.1-3.Final_redhat_00001.1.el8eap
eap8-saaj-impl
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:3.0.4-1.redhat_00001.1.el8eap
0:3.0.4-1.redhat_00001.1.el8eap
eap8-shibboleth-java-support
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.0-6.redhat_00001.1.el8eap
0:8.0.0-6.redhat_00001.1.el8eap
eap8-slf4j
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.0.16-1.redhat_00001.1.el8eap
0:2.0.16-1.redhat_00001.1.el8eap
eap8-slf4j-api
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.0.16-1.redhat_00001.1.el8eap
0:2.0.16-1.redhat_00001.1.el8eap
eap8-snakeyaml
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.2.0-1.redhat_00001.1.el8eap
0:2.2.0-1.redhat_00001.1.el8eap
eap8-wildfly
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el8eap
0:8.0.4-2.GA_redhat_00005.1.el8eap
eap8-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el8eap
0:8.0.4-2.GA_redhat_00005.1.el8eap
eap8-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el8eap
0:8.0.4-2.GA_redhat_00005.1.el8eap
eap8-wildfly-java-jdk21
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el8eap
0:8.0.4-2.GA_redhat_00005.1.el8eap
eap8-wildfly-modules
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el8eap
0:8.0.4-2.GA_redhat_00005.1.el8eap
eap8-activemq-artemis
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-cli
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-commons
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-core-client
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-dto
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-hornetq-protocol
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-hqclient-protocol
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-jakarta-client
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-jakarta-ra
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-jakarta-server
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-jakarta-service-extensions
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-jdbc-store
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-journal
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-native
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 1:2.0.0-2.redhat_00005.1.el9eap
1:2.0.0-2.redhat_00005.1.el9eap
eap8-activemq-artemis-selector
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-server
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-aesh-extensions
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.8.0-2.redhat_00001.1.el9eap
0:1.8.0-2.redhat_00001.1.el9eap
eap8-aesh-readline
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.2.0-2.redhat_00001.1.el9eap
0:2.2.0-2.redhat_00001.1.el9eap
eap8-apache-commons-codec
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.16.1-2.redhat_00007.1.el9eap
0:1.16.1-2.redhat_00007.1.el9eap
eap8-apache-commons-collections
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:3.2.2-28.redhat_2.1.el9eap
0:3.2.2-28.redhat_2.1.el9eap
eap8-apache-commons-io
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.15.1-1.redhat_00001.1.el9eap
0:2.15.1-1.redhat_00001.1.el9eap
eap8-apache-commons-lang
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:3.14.0-2.redhat_00006.1.el9eap
0:3.14.0-2.redhat_00006.1.el9eap
eap8-apache-cxf
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el9eap
0:4.0.5-1.redhat_00001.1.el9eap
eap8-apache-cxf-rt
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el9eap
0:4.0.5-1.redhat_00001.1.el9eap
eap8-apache-cxf-services
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el9eap
0:4.0.5-1.redhat_00001.1.el9eap
eap8-apache-cxf-tools
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el9eap
0:4.0.5-1.redhat_00001.1.el9eap
eap8-artemis-native
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 1:2.0.0-2.redhat_00005.1.el9eap
1:2.0.0-2.redhat_00005.1.el9eap
eap8-artemis-native-wildfly
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 1:2.0.0-2.redhat_00005.1.el9eap
1:2.0.0-2.redhat_00005.1.el9eap
eap8-artemis-wildfly-integration
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.0.1-1.redhat_00002.1.el9eap
0:2.0.1-1.redhat_00002.1.el9eap
eap8-asyncutil
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:0.1.0-2.redhat_00010.1.el9eap
0:0.1.0-2.redhat_00010.1.el9eap
eap8-aws-java-sdk
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el9eap
0:1.12.284-2.redhat_00002.1.el9eap
eap8-aws-java-sdk-core
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el9eap
0:1.12.284-2.redhat_00002.1.el9eap
eap8-aws-java-sdk-kms
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el9eap
0:1.12.284-2.redhat_00002.1.el9eap
eap8-aws-java-sdk-s3
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el9eap
0:1.12.284-2.redhat_00002.1.el9eap
eap8-cryptacular
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.2.5-2.redhat_00001.1.el9eap
0:1.2.5-2.redhat_00001.1.el9eap
eap8-eap-product-conf-parent
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:800.4.0-1.GA_redhat_00001.1.el9eap
0:800.4.0-1.GA_redhat_00001.1.el9eap
eap8-eap-product-conf-wildfly-ee-feature-pack
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:800.4.0-1.GA_redhat_00001.1.el9eap
0:800.4.0-1.GA_redhat_00001.1.el9eap
eap8-fastinfoset
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.1.0-4.redhat_00001.1.el9eap
0:2.1.0-4.redhat_00001.1.el9eap
eap8-hibernate
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.2.31-1.Final_redhat_00002.1.el9eap
0:6.2.31-1.Final_redhat_00002.1.el9eap
eap8-hibernate-core
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.2.31-1.Final_redhat_00002.1.el9eap
0:6.2.31-1.Final_redhat_00002.1.el9eap
eap8-hibernate-envers
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.2.31-1.Final_redhat_00002.1.el9eap
0:6.2.31-1.Final_redhat_00002.1.el9eap
eap8-hibernate-validator
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.1-3.Final_redhat_00001.1.el9eap
0:8.0.1-3.Final_redhat_00001.1.el9eap
eap8-hibernate-validator-cdi
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.1-3.Final_redhat_00001.1.el9eap
0:8.0.1-3.Final_redhat_00001.1.el9eap
eap8-hppc
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:0.8.1-2.redhat_00001.1.el9eap
0:0.8.1-2.redhat_00001.1.el9eap
eap8-insights-java-client
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.1.3-1.redhat_00001.1.el9eap
0:1.1.3-1.redhat_00001.1.el9eap
eap8-jakarta-servlet-jsp-jstl
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:3.0.1-1.redhat_00001.1.el9eap
0:3.0.1-1.redhat_00001.1.el9eap
eap8-jakarta-servlet-jsp-jstl-api
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:3.0.1-1.redhat_00001.1.el9eap
0:3.0.1-1.redhat_00001.1.el9eap
eap8-jboss-cert-helper
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.1.3-1.redhat_00001.1.el9eap
0:1.1.3-1.redhat_00001.1.el9eap
eap8-jboss-logging
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:3.5.3-1.Final_redhat_00001.1.el9eap
0:3.5.3-1.Final_redhat_00001.1.el9eap
eap8-jctools
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:4.0.2-1.redhat_00001.1.el9eap
0:4.0.2-1.redhat_00001.1.el9eap
eap8-jctools-core
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:4.0.2-1.redhat_00001.1.el9eap
0:4.0.2-1.redhat_00001.1.el9eap
eap8-jgroups
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:5.3.10-1.Final_redhat_00001.1.el9eap
0:5.3.10-1.Final_redhat_00001.1.el9eap
eap8-jmespath-java
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el9eap
0:1.12.284-2.redhat_00002.1.el9eap
eap8-log4j
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.22.1-1.redhat_00002.1.el9eap
0:2.22.1-1.redhat_00002.1.el9eap
eap8-narayana
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-jbosstxbridge
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-jbossxts
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-jts-idlj
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-jts-integration
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-restat-api
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-restat-bridge
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-restat-integration
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-restat-util
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-nimbus-jose-jwt
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:9.37.3-1.redhat_00001.1.el9eap
0:9.37.3-1.redhat_00001.1.el9eap
eap8-objectweb-asm
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:9.6.0-1.redhat_00002.1.el9eap
0:9.6.0-1.redhat_00002.1.el9eap
eap8-objectweb-asm-util
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:9.6.0-1.redhat_00002.1.el9eap
0:9.6.0-1.redhat_00002.1.el9eap
eap8-pem-keystore
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.3.0-1.redhat_00001.1.el9eap
0:2.3.0-1.redhat_00001.1.el9eap
eap8-resteasy-extensions
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.0.1-3.Final_redhat_00001.1.el9eap
0:2.0.1-3.Final_redhat_00001.1.el9eap
eap8-resteasy-spring
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:3.0.1-2.Final_redhat_00001.1.el9eap
0:3.0.1-2.Final_redhat_00001.1.el9eap
eap8-resteasy-tracing-api
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.0.1-3.Final_redhat_00001.1.el9eap
0:2.0.1-3.Final_redhat_00001.1.el9eap
eap8-saaj-impl
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:3.0.4-1.redhat_00001.1.el9eap
0:3.0.4-1.redhat_00001.1.el9eap
eap8-shibboleth-java-support
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.0-6.redhat_00001.1.el9eap
0:8.0.0-6.redhat_00001.1.el9eap
eap8-slf4j
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.0.16-1.redhat_00001.1.el9eap
0:2.0.16-1.redhat_00001.1.el9eap
eap8-slf4j-api
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.0.16-1.redhat_00001.1.el9eap
0:2.0.16-1.redhat_00001.1.el9eap
eap8-snakeyaml
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.2.0-1.redhat_00001.1.el9eap
0:2.2.0-1.redhat_00001.1.el9eap
eap8-wildfly
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el9eap
0:8.0.4-2.GA_redhat_00005.1.el9eap
eap8-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el9eap
0:8.0.4-2.GA_redhat_00005.1.el9eap
eap8-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el9eap
0:8.0.4-2.GA_redhat_00005.1.el9eap
eap8-wildfly-java-jdk21
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el9eap
0:8.0.4-2.GA_redhat_00005.1.el9eap
eap8-wildfly-modules
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el9eap
0:8.0.4-2.GA_redhat_00005.1.el9eap

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
NucleiKeycloak - Open Redirect

History

History
RecordedChangedSources
affected
factsCVE List, EUVD, OSV
first indexedCVE List, EUVD, GitHub Advisories, Nuclei, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-8883 is a medium vulnerability (CVSS 6.1) in Red Hat Build Of Keycloak, published September 19, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.11%, the 81st percentile. Fixed in org.keycloak:keycloak-services 22.0.13.

References

Show 80 moreShow less
This page doesn't list everything

Left out here: 110 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open