CVE-2025-23368HIGH 8.1EPSS p57.9%

CVE-2025-23368CVE-2025-23368

redhat / wildfly_core

Description

A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI.

Scoring

CVSS 3.18.1 (HIGH)
VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS0.89% probability of exploitation · percentile 57.9% · 2026-10-06T12:00:23Z
Published2025-03-04
Last modified2026-09-14

Underlying weaknesses· 1

CWE-307

References

  1. https://access.redhat.com/errata/RHSA-2026:18054
  2. https://access.redhat.com/errata/RHSA-2026:18055
  3. https://access.redhat.com/errata/RHSA-2026:18059
  4. https://access.redhat.com/security/cve/CVE-2025-23368
  5. https://bugzilla.redhat.com/show_bug.cgi?id=2337621
  6. https://www.gruppotim.it/it/footer/red-team.html

1

TypeTargetConfidenceTier
WeaknessImproper Restriction of Excessive Authentication Attemptscwe-3070%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-12543
CVE
CVE-2025-58587
CVE
CVE-2026-5516
CVE
CVE-2025-1393
CVE
CVE-2025-10611
CVE
CVE-2025-53118
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.