CVE security advisories and vulnerability history for org.keycloak:keycloak-services by keycloak.
94
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
2
Public exploits
PoC or exploit code
6.1
Avg CVSS
2018–2026
Last updated
Overview
keycloak org.keycloak:keycloak-services has 94 published CVE records since 2018, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 6.1.
This page aggregates every publicly disclosed vulnerability (CVE) affecting keycloak org.keycloak:keycloak-services, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
Severity and exploitation
How the CVSS severity of keycloak org.keycloak:keycloak-services's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical3
High33
Medium46
Low12
In CISA’s Known Exploited Vulnerabilities catalog
0
None of keycloak org.keycloak:keycloak-services's CVEs are currently listed in CISA's KEV catalog.
Public exploits
2
2 of keycloak org.keycloak:keycloak-services's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every keycloak org.keycloak:keycloak-services version named in a CVE, then pick one to see only the CVEs that affect it.
Version ranges
< 22.0.108 CVEs
23.0.0 <= v < 24.0.38 CVEs
< 26.6.27 CVEs
<= 26.4.77 CVEs
26.5.0 <= v < 26.6.37 CVEs
< 26.5.75 CVEs
< 21.1.23 CVEs
< 26.4.93 CVEs
< 26.6.33 CVEs
<= 26.2.53 CVEs
26.5.0 <= v < 26.5.33 CVEs
< 18.0.02 CVEs
Common weakness types
The CWE weakness categories most often found in keycloak org.keycloak:keycloak-services CVEs. Follow any weakness for its full explanation.
Common questions about keycloak org.keycloak:keycloak-services vulnerabilities.
How many CVEs does keycloak org.keycloak:keycloak-services have?
keycloak org.keycloak:keycloak-services has 94 published CVE records since 2018.
How many keycloak org.keycloak:keycloak-services CVEs are in CISA KEV?
None of keycloak org.keycloak:keycloak-services's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for keycloak org.keycloak:keycloak-services vulnerabilities?
Yes — 2 of keycloak org.keycloak:keycloak-services's CVEs have a known public exploit.
Which versions of keycloak org.keycloak:keycloak-services are affected?
130 distinct keycloak org.keycloak:keycloak-services versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in keycloak org.keycloak:keycloak-services CVEs?
keycloak org.keycloak:keycloak-services's CVEs most often map to these CWE weakness types: CWE-284 (Improper Access Control), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')), CWE-287 (Improper Authentication), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
How many critical keycloak org.keycloak:keycloak-services vulnerabilities are there?
keycloak org.keycloak:keycloak-services has 3 critical and 33 high-severity CVEs.
What is the average severity of keycloak org.keycloak:keycloak-services CVEs?
The average CVSS base score across keycloak org.keycloak:keycloak-services's scored CVEs is 6.1.
