Red Hat RHEL-8 based Middleware Containers vulnerabilities

12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Latest Red Hat RHEL-8 based Middleware Containers vulnerabilities

CVE-2026-15563 — Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos (CVSS 7.4)
CVE-2025-14831 — Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification (CVSS 5.3)
CVE-2025-9820 — Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function (CVSS 4.0)
CVE-2026-0603 — Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection (CVSS 8.3)
CVE-2025-6020 — Linux-pam: linux-pam directory traversal (CVSS 7.8)
CVE-2025-4057 — Activemq-artemis-operator: amq broker operator starting credentials reuse (CVSS 5.5)
CVE-2024-8698 — Keycloak-saml-core: improper verification of saml responses leading to privilege escalation in keycloak (CVSS 7.7)
CVE-2024-5967 — Keycloak: leak of configured ldap bind credentials through the keycloak admin console (CVSS 2.7)
CVE-2024-4540 — Keycloak: exposure of sensitive information in pushed authorization requests (par) kc_restart cookie (CVSS 7.5)
CVE-2023-6544 — Keycloak: authorization bypass (CVSS 5.4)
CVE-2023-6484 — Keycloak: log injection during webauthn authentication or registration (CVSS 5.3)
CVE-2024-1249 — Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos (CVSS 7.4)