High 8.1Published Mar 4, 2025

CVE-2025-23368Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli

Updated under an hour ago (Oct 28, 2026, 3:40 AM ET)

Does this affect you?

It affects Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 and 10 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Exploited in the last 30 days

A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI.

CVSS: 8.1 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-307
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: redhat
NVD analysis: Modified
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Red Hat Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 redhat:jboss_enterprise_application_platform_eus	from 0:7.3.18-3.GA_redhat_00001.1.el7eap not affected	CNA record
Red Hat Red Hat JBoss Enterprise Application Platform 8.1.6.GA redhat:jboss_enterprise_application_platform	from 27.1.9.Final-redhat-00002 not affected	CNA record
Red Hat Red Hat Build of Keycloak redhat:build_keycloak	Versions not stated	CNA record
Red Hat Red Hat Data Grid 8 redhat:jboss_data_grid	8	CNA record
Red Hat Red Hat Fuse 7 redhat:jboss_fuse	7	CNA record
Red Hat Red Hat Integration Camel K 1 redhat:integration	1	CNA record
Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack redhat:jbosseapxp	Versions not stated	CNA record
Red Hat Red Hat Process Automation 7 redhat:jboss_enterprise_bpms_platform	7	CNA record
Red Hat Red Hat Single Sign-On 7 redhat:red_hat_single_sign_on	7	CNA record
redhat wildfly_core redhat:wildfly_core	before 31.0.3	NVD
1–10 of 12

References

References

https://access.redhat.com/errata/RHSA-2026:18054	vendor-advisory, x-refsource-redhat
https://access.redhat.com/errata/RHSA-2026:18055	vendor-advisory, x-refsource-redhat
https://access.redhat.com/errata/RHSA-2026:18059	vendor-advisory, x-refsource-redhat
https://access.redhat.com/errata/RHSA-2026:33371	vendor-advisory, x-refsource-redhat
https://access.redhat.com/security/cve/CVE-2025-23368	vdb-entry, x-refsource-redhat, vendor-advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2337621	issue-tracking, x-refsource-redhat, vendor-advisory
https://www.gruppotim.it/it/footer/red-team.html	exploit, third-party-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.