Vulnerabilities > Redhat > Openshift Application Runtimes > Low

DATE CVE VULNERABILITY TITLE RISK
2021-08-05 CVE-2021-3642 Information Exposure Through Discrepancy vulnerability in multiple products
A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to Timing Attack if enabled.
3.5
2021-02-11 CVE-2020-10734 Cross-Site Request Forgery (CSRF) vulnerability in Redhat products
A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF protection.
local
low complexity
redhat CWE-352
2.1