K
Vendor security profile
Keycloak
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs29
Critical0
CISA KEV0
Public exploit6
Patch rate%3
Avg. CVSS6.3
12-month vulnerability rate
0
0
0
1
1
0
1
0
1
0
1
0
CVE KEV
CVE severity distribution
29toplam CVE
High14 (48%)
Medium12 (41%)
Low3 (10%)
Patch and exploitation view
%3
Verified patch
%0
CISA KEV
%21
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
28Unknown
Latest vulnerabilities
7.4
3.1
CVE-2025-12150Org.keycloak/keycloak-services: webauthn attestation statement verification bypass
Patch status unknownEPSS %0
3.7
CVE-2025-10939Org.keycloak/keycloak-quarkus-server: unable to restrict access to the admin console
Patch status unknownEPSS %0
5.3
CVE-2025-8419Org.keycloak/keycloak-services: keycloak smtp inject vulnerability
Patch status unknownEPSS %0