Red Hat Rhel-8 Based Middleware Containers vulnerabilities

14 CVEs affecting Red Hat Rhel-8 Based Middleware Containers, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-15563, published 2026-08-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-8698, published 2024-09-19. High severity, CVSS 7.7. EPSS: 2% chance of exploitation in the next 30 days. A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for…
CVE-2023-6544, published 2024-04-25. Medium severity, CVSS 5.4. EPSS: 1.1% chance of exploitation in the next 30 days. A flaw was found in the Keycloak package. This issue occurs due to a permissive regular expression hardcoded for filtering which allows hosts to register a dynamic client. A malicious user with…
CVE-2026-0603, published 2026-01-23. High severity, CVSS 8.3. EPSS: 1% chance of exploitation in the next 30 days. A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters…
CVE-2023-6484, published 2024-04-25. Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days. A log injection flaw was found in Keycloak. A text string may be injected through the authentication form when using the WebAuthn authentication mode. This issue may have a minor impact to the logs…
CVE-2026-6100, published 2026-04-13. High severity, CVSS 8.1. EPSS: 0.8% chance of exploitation in the next 30 days. Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is…
CVE-2025-14831, published 2026-02-09. Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days. A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates…
CVE-2024-5967, published 2024-06-18. Low severity, CVSS 2.7. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability was found in Keycloak. The LDAP testing endpoint allows changing the Connection URL independently without re-entering the currently configured LDAP bind credentials. This flaw allows…
CVE-2024-4540, published 2024-06-03. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A flaw was found in Keycloak in OAuth 2.0 Pushed Authorization Requests (PAR). Client-provided parameters were found to be included in plain text in the KC_RESTART cookie returned by the…
CVE-2026-4786, published 2026-04-13. High severity, CVSS 7.1. EPSS: 0.5% chance of exploitation in the next 30 days. Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open()" API could have commands injected into the…
CVE-2025-6020, published 2025-06-17. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink…

Latest

CVE-2026-15563, published 2026-08-11. High severity, CVSS 7.4. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in EAP's IIOP. The listener's NameService would accept bind operations without authentication, allowing an attacker to hijack JNDI lookups and binding them to a malicious ORB,…
CVE-2025-9820, published 2026-01-26. Medium severity, CVSS 4.0. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the…
CVE-2025-4057, published 2025-05-26. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in ActiveMQ Artemis. The password generated by activemq-artemis-operator does not regenerate between separated CR dependencies.