VULNERABILITY INTELLIGENCE
CVE-2025-14083
CVSS score2.7 LOW
EPSS probability0.35%
CISA KEVNot currently listed
Published2026-01-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Description
A flaw was found in the Keycloak Admin REST API. This vulnerability allows the exposure of backend schema and rules, potentially leading to targeted attacks or privilege escalation via improper access control.
Weakness classification
- secalert@redhat.com: CWE-284