SecAlerts
Keycloak logo

Keycloak

Security Risk Profile

27
/100
low

Security Risk Score

Comprehensive risk assessment based on 86 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from September 19, 2014 to present

86
Total CVEs
22
Critical+High
0
Exploited
16
Unpatched

Threat Assessment

Avg CVSS
5.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
16
Critical/High
Risk Level
27/100
low
📈 26 in Last 30 Days

Severity Distribution

Critical
1
High
21
Medium
50
Low
13

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
30

Age Distribution

Common Weaknesses (CWE)

1
SSRF
5
2
XSS
2
3
Path Traversal
2
4
CSRF
2
5
CRLF Injection
1

Most Affected Products

1. Keycloak Keycloak77
2. redhat Build Of Keycloak43
3. maven/org.keycloak:keycloak-services19
4. Keycloak keycloak-nodejs-auth-utils11
5. maven/org.keycloak:keycloak-ldap-federation4

Recent Vulnerabilities

See more →

Monitor Keycloak in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.