← All advisories

Medium severity6.1NVD Advisory· Published Dec 10, 2019· Updated Jun 17, 2026

CVE-2014-3656

CVE-2014-3656

Description

JBoss KeyCloak: XSS in login-status-iframe.html

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.keycloak:keycloak-coreMaven	< 1.1.0.Beta1	1.1.0.Beta1

Affected products

2

ghsa-coords
pkg:maven/org.keycloak/keycloak-core
Range: < 1.1.0.Beta1
JBoss KeyCloak/JBoss KeyCloakv5
Range: through 2014-09-22

Patches

Vulnerability mechanics

References

7

access.redhat.com/security/cve/cve-2014-3656nvdVendor AdvisoryWEB
bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor AdvisoryWEB
github.com/advisories/GHSA-px42-mr8m-cpghghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2014-3656ghsaADVISORY
github.com/keycloak/keycloak/commit/63b41e2548cbc20bd3758e34a82d880e177bf24cghsaWEB
issues.jboss.org/browse/KEYCLOAK-703ghsaWEB
security.snyk.io/vuln/SNYK-JAVA-ORGKEYCLOAK-31231ghsaWEB

News mentions

0

No linked articles in our index yet.