[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f08aNocZ8zhnC0GBZEHxQZgwzKyaRLaEKj-GMVBllnm0":3,"g5a-family:redhat\u002Fsingle_sign-on":160,"g5a-ex:redhat\u002Fsingle_sign-on@*":161},{"success":4,"data":5},true,{"product":6,"versions":57,"topVulnerabilitiesByEpss":75,"kevVulnerabilities":133,"seoMetadata":138,"meta":157},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":56},"redhat","single_sign-on",17,101,1,"2026-03-27",[14,17,21,24,27,29,31,33,36,38,40,42,44,46,49,51,54],{"version":15,"cve_count":16,"kev_count":11,"has_kev":4},"7.0",50,{"version":18,"cve_count":19,"kev_count":19,"has_kev":20},"7.1",0,false,{"version":22,"cve_count":23,"kev_count":19,"has_kev":20},"7.2",5,{"version":25,"cve_count":26,"kev_count":19,"has_kev":20},"7.3",11,{"version":28,"cve_count":19,"kev_count":19,"has_kev":20},"7.3.2",{"version":30,"cve_count":11,"kev_count":19,"has_kev":20},"7.3.3",{"version":32,"cve_count":11,"kev_count":19,"has_kev":20},"7.3.5",{"version":34,"cve_count":35,"kev_count":19,"has_kev":20},"7.4",4,{"version":37,"cve_count":19,"kev_count":19,"has_kev":20},"7.4.1",{"version":39,"cve_count":11,"kev_count":19,"has_kev":20},"7.4.10",{"version":41,"cve_count":11,"kev_count":19,"has_kev":20},"7.4.4",{"version":43,"cve_count":11,"kev_count":19,"has_kev":20},"7.4.7",{"version":45,"cve_count":19,"kev_count":19,"has_kev":20},"7.4.9",{"version":47,"cve_count":48,"kev_count":19,"has_kev":20},"7.5.0",2,{"version":50,"cve_count":11,"kev_count":19,"has_kev":20},"7.5.1",{"version":52,"cve_count":53,"kev_count":19,"has_kev":20},"7.6",10,{"version":55,"cve_count":19,"kev_count":19,"has_kev":20},"7.6.2","Single Sign-on by Redhat is a technology product with 17 tracked versions and 101 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74],{"version":15,"cve_count":16,"kev_count":11,"has_kev":4},{"version":18,"cve_count":19,"kev_count":19,"has_kev":20},{"version":22,"cve_count":23,"kev_count":19,"has_kev":20},{"version":25,"cve_count":26,"kev_count":19,"has_kev":20},{"version":28,"cve_count":19,"kev_count":19,"has_kev":20},{"version":30,"cve_count":11,"kev_count":19,"has_kev":20},{"version":32,"cve_count":11,"kev_count":19,"has_kev":20},{"version":34,"cve_count":35,"kev_count":19,"has_kev":20},{"version":37,"cve_count":19,"kev_count":19,"has_kev":20},{"version":39,"cve_count":11,"kev_count":19,"has_kev":20},{"version":41,"cve_count":11,"kev_count":19,"has_kev":20},{"version":43,"cve_count":11,"kev_count":19,"has_kev":20},{"version":45,"cve_count":19,"kev_count":19,"has_kev":20},{"version":47,"cve_count":48,"kev_count":19,"has_kev":20},{"version":50,"cve_count":11,"kev_count":19,"has_kev":20},{"version":52,"cve_count":53,"kev_count":19,"has_kev":20},{"version":55,"cve_count":19,"kev_count":19,"has_kev":20},[76,84,91,96,100,105,111,117,124,128],{"cveId":77,"description":78,"publishedDate":79,"cvssScore":80,"cvssVersion":81,"severity":82,"isKev":4,"epssScore":83},"CVE-2023-44487","The HTTP\u002F2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.","2023-10-10",7.5,"v3.1","High",0.99999,{"cveId":85,"description":86,"publishedDate":87,"cvssScore":88,"cvssVersion":81,"severity":89,"isKev":20,"epssScore":90},"CVE-2023-48795","The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang\u002FOTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org\u002Fx\u002Fcrypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.","2023-12-18",5.9,"Medium",0.93547,{"cveId":92,"description":93,"publishedDate":94,"cvssScore":80,"cvssVersion":81,"severity":82,"isKev":20,"epssScore":95},"CVE-2019-9515","Some HTTP\u002F2 implementations are vulnerable to a settings flood, potentially leading to a denial of service. The attacker sends a stream of SETTINGS frames to the peer. Since the RFC requires that the peer reply with one acknowledgement per SETTINGS frame, an empty SETTINGS frame is almost equivalent in behavior to a ping. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.","2019-08-13",0.87399,{"cveId":97,"description":98,"publishedDate":94,"cvssScore":80,"cvssVersion":81,"severity":82,"isKev":20,"epssScore":99},"CVE-2019-9514","Some HTTP\u002F2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depending on how the peer queues the RST_STREAM frames, this can consume excess memory, CPU, or both.",0.82813,{"cveId":101,"description":102,"publishedDate":103,"cvssScore":80,"cvssVersion":81,"severity":82,"isKev":20,"epssScore":104},"CVE-2021-4104","JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests that result in remote code execution in a similar fashion to CVE-2021-44228. Note this issue only affects Log4j 1.2 when specifically configured to use JMSAppender, which is not the default. Apache Log4j 1.2 reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions.","2021-12-14",0.80599,{"cveId":106,"description":107,"publishedDate":108,"cvssScore":109,"cvssVersion":81,"severity":89,"isKev":20,"epssScore":110},"CVE-2020-27838","A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients (like client secret) without authentication which could be an issue if the same PUBLIC client changed to CONFIDENTIAL later. The highest threat from this vulnerability is to data confidentiality.","2021-03-08",6.5,0.17943,{"cveId":112,"description":113,"publishedDate":114,"cvssScore":80,"cvssVersion":115,"severity":82,"isKev":20,"epssScore":116},"CVE-2018-12023","An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Oracle JDBC jar in the classpath, and an attacker can provide an LDAP service to access, it is possible to make the service execute a malicious payload.","2019-03-21","v3.0",0.08872,{"cveId":118,"description":119,"publishedDate":120,"cvssScore":121,"cvssVersion":81,"severity":122,"isKev":20,"epssScore":123},"CVE-2019-14379","SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup), leading to remote code execution.","2019-07-29",9.8,"Critical",0.08111,{"cveId":125,"description":126,"publishedDate":114,"cvssScore":80,"cvssVersion":81,"severity":82,"isKev":20,"epssScore":127},"CVE-2018-12022","An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Jodd-db jar (for database access for the Jodd framework) in the classpath, and an attacker can provide an LDAP service to access, it is possible to make the service execute a malicious payload.",0.07289,{"cveId":129,"description":130,"publishedDate":131,"cvssScore":80,"cvssVersion":81,"severity":82,"isKev":20,"epssScore":132},"CVE-2024-1635","A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protocol. Whenever a malicious user opens and closes a connection with the HTTP port of the server and then closes the connection immediately, the server will end with both memory and open file limits exhausted at some point, depending on the amount of memory available. \r\n\r\nAt HTTP upgrade to remoting, the WriteTimeoutStreamSinkConduit leaks connections if RemotingConnection is closed by Remoting ServerConnectionOpenListener. Because the remoting connection originates in Undertow as part of the HTTP upgrade, there is an external layer to the remoting connection. This connection is unaware of the outermost layer when closing the connection during the connection opening procedure. Hence, the Undertow WriteTimeoutStreamSinkConduit is not notified of the closed connection in this scenario. Because WriteTimeoutStreamSinkConduit creates a timeout task, the whole dependency tree leaks via that task, which is added to XNIO WorkerThread. So, the workerThread points to the Undertow conduit, which contains the connections and causes the leak.","2024-02-19",0.04572,[134],{"cveId":77,"description":78,"publishedDate":79,"cvssScore":80,"severity":82,"isKev":4,"epssScore":83,"cisaVulnName":135,"cisaDateAdded":79,"cisaShortDescription":136,"cisaRequiredAction":137},"HTTP\u002F2 Rapid Reset Attack Vulnerability","HTTP\u002F2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"title":139,"metaDescription":140,"keywords":141,"structuredData":142},"Single Sign-on by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Single Sign-on by Redhat covering 17 versions with 101 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Single Sign-on vulnerabilities, Single Sign-on security, Single Sign-on CVE, Redhat Single Sign-on, Single Sign-on threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Single Sign-on KEV, Single Sign-on exploited vulnerabilities",{"@context":143,"@type":144,"name":145,"description":140,"url":146,"manufacturer":147,"applicationCategory":151,"softwareVersion":152,"mainEntity":153},"https:\u002F\u002Fschema.org","SoftwareApplication","Single Sign-on","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fsingle_sign-on",{"@type":148,"name":149,"url":150},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","17 versions tracked",{"@type":154,"name":155,"description":156,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Single Sign-on Security Vulnerabilities","Security vulnerabilities affecting Single Sign-on by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":158,"apiVersion":159},"2026-10-17T14:37:31.149Z","3.0",[],{"rows":162,"total":11,"capped":20,"failed":19},[163],{"cveId":77,"name":135,"severity":82,"cvss":80,"added":79,"epss":83,"published":164,"ranges":165,"checked":4,"hits":166,"covers":20},"2023-10-10T14:15:10.883",[15],[]]