Red Hat Security Advisory: Red Hat Single Sign-On 7.6.12 security update
Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. This release of Red Hat Single Sign-On 7.6.12 serves as a replacement for Red Hat Single Sign-On 7.6.11, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. This security update has moderate impact. Security fixes: * org.wildfly.core/wildfly-core-management-client: Wildfly vulnerable to Cross-Site Scripting (XSS) (CVE-2024-10234)
AI Analysis
Technical Summary
Red Hat Single Sign-On 7.6.12, based on the Keycloak project, includes a security fix for a Cross-Site Scripting (XSS) vulnerability (CVE-2024-10234) in the Wildfly core management client component (org.wildfly.core/wildfly-core-management-client). This vulnerability could allow an attacker to inject malicious scripts in the management client interface. The advisory replaces the previous release 7.6.11 and is classified as moderate impact. No CVSS score is provided. The update is distributed via Red Hat's Customer Portal with instructions to back up existing installations before applying.
Potential Impact
The vulnerability allows for Cross-Site Scripting (XSS) attacks in the Wildfly core management client, which could lead to the execution of malicious scripts in the context of the affected application. This may impact the security of authentication and single sign-on services provided by Red Hat Single Sign-On 7.6. No known exploits in the wild have been reported.
Mitigation Recommendations
A security update to Red Hat Single Sign-On 7.6.12 is available and should be applied to remediate the vulnerability. Before applying the update, back up all existing installations, including applications, configuration files, and databases. The update can be downloaded from the Red Hat Customer Portal. No additional mitigations are specified by the vendor.
Red Hat Security Advisory: Red Hat Single Sign-On 7.6.12 security update
Description
Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. This release of Red Hat Single Sign-On 7.6.12 serves as a replacement for Red Hat Single Sign-On 7.6.11, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. This security update has moderate impact. Security fixes: * org.wildfly.core/wildfly-core-management-client: Wildfly vulnerable to Cross-Site Scripting (XSS) (CVE-2024-10234)
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Red Hat Single Sign-On 7.6.12, based on the Keycloak project, includes a security fix for a Cross-Site Scripting (XSS) vulnerability (CVE-2024-10234) in the Wildfly core management client component (org.wildfly.core/wildfly-core-management-client). This vulnerability could allow an attacker to inject malicious scripts in the management client interface. The advisory replaces the previous release 7.6.11 and is classified as moderate impact. No CVSS score is provided. The update is distributed via Red Hat's Customer Portal with instructions to back up existing installations before applying.
Potential Impact
The vulnerability allows for Cross-Site Scripting (XSS) attacks in the Wildfly core management client, which could lead to the execution of malicious scripts in the context of the affected application. This may impact the security of authentication and single sign-on services provided by Red Hat Single Sign-On 7.6. No known exploits in the wild have been reported.
Mitigation Recommendations
A security update to Red Hat Single Sign-On 7.6.12 is available and should be applied to remediate the vulnerability. Before applying the update, back up all existing installations, including applications, configuration files, and databases. The update can be downloaded from the Red Hat Customer Portal. No additional mitigations are specified by the vendor.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:11645
- Cve Count
- 2
- Additional Cves
- ["CVE-2024-10234"]
- Cvss Version
- null
Threat ID: 6a3aab54eed863c81e3a3a4c
Added to database: 06/23/2026, 15:50:44 UTC
Last enriched: 06/23/2026, 15:51:57 UTC
Last updated: 07/07/2026, 09:15:18 UTC
Views: 20
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.