Single sign-on
This hub aggregates every CVE we track for Single sign-on, a product in the cloud saas space. Use it to gauge the current risk picture and drill into individual advisories.
112
CVEs tracked
8
Critical
47
High
1
In CISA KEV
Severity distribution
MEDIUM51HIGH47CRITICAL8LOW6
Monthly trend
4
0
1
0
0
0
0
0
0
0
0
0
1
0
0
0
1
0
7
0
0
0
2
0
2024-092026-08
Latest CVEs
The 15 most recently published vulnerabilities affecting Single sign-on.
- CVE-2026-16093Keycloak-services: keycloak-services: required signed-jwt assertion policy can be bypassed with unsigned assertion headers5.4
- CVE-2026-15945Keycloak-services: keycloak-services: group hierarchy search discloses hidden parent groups under fgap v24.3
- CVE-2026-28367Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator8.7
- CVE-2026-28369Undertow: undertow: request smuggling via malformed http request headers8.7
- CVE-2026-28368Undertow: undertow: request smuggling via inconsistent header parsing8.7
- CVE-2026-3121Keycloak: org.keycloak/keycloak-services: keycloak: privilege escalation via manage-clients permission6.5
- CVE-2026-4874Org.keycloak.protocol.oidc.grants: org.keycloak.services.managers: keycloak: server-side request forgery via oidc token endpoint manipulation3.1
- CVE-2026-4366Keycloak-services: blind server-side request forgery (ssrf) via http redirect handling in keycloak5.8
- CVE-2026-3009Org.keycloak/keycloak-services: improper enforcement of disabled identity provider in identitybrokerservice (authentication bypass)8.1
- CVE-2025-12543Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf9.6
- CVE-2025-9784Undertow: undertow madeyoureset http/2 ddos vulnerability7.5
- CVE-2023-1932Hibernate-validator: rendering of invalid html with safehtml leads to html injection and xss6.1
- CVE-2024-8883Keycloak: vulnerable redirect uri validation results in open redirec6.1
- CVE-2023-6841Keycloak: amount of attributes per object is not limited and it may lead to dos7.5
- CVE-2024-7341Wildfly-elytron: org.keycloak/keycloak-services: session fixation in elytron saml adapters7.1
Product normalization is registry-driven with AI assist and human review. How it works