CVE-2020-1717: Red Hat JBoss Fuse

Low severity, CVSS 2.7. EPSS: 0.8% chance of exploitation in the next 30 days.

A flaw was found in Keycloak 7.0.1. A logged in user can do an account email enumeration attack.

Affected products

  • Red Hat JBoss Fuse: version 7.0.0 only
  • Red Hat Keycloak: version 7.0.1 only
  • Red Hat Openshift Application Runtimes: affected versions not specified
  • Red Hat Single Sign-On: version 7.0 only

Published 2021-02-11. Last modified 2026-06-17.