Lucene search
HistorySep 01, 2022 - 9:15 p.m.
CVE-2022-2256
stored xss
red hat single sign-on
keycloak
admin console
default roles
3.8 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
22.7%
A Stored Cross-site scripting (XSS) vulnerability was found in keycloak as shipped in Red Hat Single Sign-On 7. This flaw allows a privileged attacker to execute malicious scripts in the admin console, abusing the default roles functionality.
Affected configurations
Node
redhatsingle_sign-onMatch7.0
Related
patchstack
patchstack
prion
prion
Cross site scripting
2022-09-01 21:15:00
osv
osv
Keycloak vulnerable to Cross-Site Scripting (XSS)
2022-09-02 00:01:02
veracode
veracode
Cross-site Scripting (XSS)
2022-09-28 07:49:15
wpvulndb
wpvulndb
cve
cve
CVE-2022-2256
2022-09-01 21:15:09
github
github
cvelist
cvelist
CVE-2022-2256
2022-09-01 19:57:29
redhatcve
redhatcve
CVE-2022-2256
2022-06-29 20:05:41
nessus
nessus
redhat
redhat
3.8 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
22.7%
Related for NVD:CVE-2022-2256