CVE-2025-23368 | Vulnetix

CVE-2025-23368 PUBLISHED CVSS 8.100000381469727 HIGH

A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI.

EPSS 0.88% · 58.8th percentile

Risk Scores

CVSS 3.1

8.100000381469727

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

0.88%

58.8th percentile

Affected Products

Vendor	Product	Versions
Red Hat	Red Hat Process Automation 7
Red Hat	Red Hat Data Grid 8
Red Hat	Red Hat Single Sign-On 7
Red Hat	Red Hat Integration Camel K 1
Maven	org.wildfly.core:wildfly-elytron-integration	32.0.0.Beta1, 0
Red Hat	Red Hat Fuse 7
redhat	wildfly_core	0
Red Hat	Red Hat Build of Keycloak
		0
redhat	jboss_enterprise_application_platform	8.0.0, 7.0.0
redhat	data_grid	8.0
Red Hat	Red Hat JBoss Enterprise Application Platform 8
Red Hat	Red Hat JBoss Enterprise Application Platform Expansion Pack
Red Hat	Red Hat Process Automation 7
Red Hat	Red Hat Fuse 7
Red Hat	Red Hat JBoss Enterprise Application Platform 7
Red Hat	Red Hat JBoss Data Grid 7
Red Hat	Red Hat Single Sign-On 7

Timeline

Mar 4, 2025 CVE Published
Mar 5, 2025 EPSS Score
Mar 20, 2025 EPSS Score
Mar 23, 2025 Coalition ESS Score
Apr 3, 2025 EPSS Score
Apr 18, 2025 EPSS Score
May 3, 2025 EPSS Score
May 18, 2025 EPSS Score
Jun 1, 2025 EPSS Score
Jun 16, 2025 EPSS Score
Jun 18, 2025 Coalition ESS Score
Jul 1, 2025 EPSS Score

References

Open in Interactive Console →