CVE-2020-1718: Red Hat JBoss Fuse

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

A flaw was found in the reset credential flow in all Keycloak versions before 8.0.0. This flaw allows an attacker to gain unauthorized access to the application.

Affected products

• Red Hat JBoss Fuse: version 7.0.0 only
• Red Hat Keycloak: before 8.0.0 (fixed in 8.0.0)
• Red Hat Openshift Application Runtimes: affected versions not specified

Published 2020-05-12. Last modified 2026-06-17.