[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGraCHcUZrMKJ20dwJHEUPjVEjb57aixHKKpy4T1r-eY":3,"g5a-risk:CVE-2025-23368":131},{"success":4,"data":5,"meta":128},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":59,"references":60,"referencesCount":74,"weaknesses":75,"weaknessesCount":84,"isActivelyExploited":85,"cisaInfo":27,"otxData":27,"relatedBlogPosts":86,"seoMetadata":87,"configurations":112,"relatedVendorCves":126,"notableEvents":127},"CVE-2025-23368","What is CVE-2025-23368?","A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI.","A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts with...","2025-03-04T16:15:39.27","2025-10-14T16:56:41.847",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":37,"CVSSMetricV2":38,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"secalert@redhat.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":26,"BaseSeverity":23,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NETWORK","HIGH","NONE","UNCHANGED",8.1,null,2.2,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":36,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":34,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":35,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"LOW","CRITICAL",3.9,[],[],0.00885,[39,39,39,39,39,39,39],"Critical",[43,48,52,55],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"redhat","data_grid","8.0","cpe:2.3:a:redhat:data_grid:8.0:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":50,"criteria":51,"vulnerable":4},"jboss_enterprise_application_platform","7.0.0","cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":53,"criteria":54,"vulnerable":4},"8.0.0","cpe:2.3:a:redhat:jboss_enterprise_application_platform:8.0.0:*:*:*:*:*:*:*",{"vendor":44,"product":56,"version":57,"criteria":58,"vulnerable":4},"wildfly_elytron","-","cpe:2.3:a:redhat:wildfly_elytron:-:*:*:*:*:*:*:*",4,[61,66,69],{"url":62,"source":63,"tags":64},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2025-23368","Red Hat",[65],"Vendor Advisory",{"url":67,"source":63,"tags":68},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2337621",[65],{"url":70,"source":71,"tags":72},"https:\u002F\u002Fwww.gruppotim.it\u002Fit\u002Ffooter\u002Fred-team.html","Gruppotim",[73],"Third Party Advisory",3,[76],{"id":77,"name":78,"description":79,"extendedDescription":80,"status":81,"abstraction":82,"structure":83},"CWE-307","Improper Restriction of Excessive Authentication Attempts","The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks.","","Draft","Base","Simple",1,false,[],{"title":88,"metaDescription":89,"keywords":90,"canonicalUrl":91,"structuredData":92},"What is CVE-2025-23368? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-23368, a critical severity cyber security vulnerability from 2025. A flaw was found in Wildfly Elytron integration. The co...","CVE-2025-23368, CVE-2025-23368 vulnerability, CVE-2025-23368 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, redhat security, data_grid vulnerability, jboss_enterprise_application_platform vulnerability, wildfly_elytron vulnerability","\u002Fwhat-is\u002Fcve-2025-23368",{"@context":93,"@type":94,"headline":88,"description":89,"datePublished":10,"dateModified":11,"author":95,"publisher":99,"about":103,"mainEntityOfPage":107,"articleSection":110,"keywords":111},"https:\u002F\u002Fschema.org","TechArticle",{"@type":96,"name":97,"url":98},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":96,"name":97,"url":98,"logo":100},{"@type":101,"url":102},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":104,"name":6,"description":105,"additionalType":106},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":108,"@id":109},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-23368","Cybersecurity","CVE-2025-23368, CVE-2025-23368 vulnerability, CVE-2025-23368 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[113],{"Operator":27,"Negate":27,"Nodes":114},[115],{"Operator":116,"Negate":85,"CPEMatch":117},"OR",[118,120,122,124],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":119,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"7095200A-4DAC-4433-99E8-86CA88E1E4D4",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":121,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"72A54BDA-311C-413B-8E4D-388AD65A170A",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":123,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"0D8BC03A-4198-4488-946B-3F6B43962942",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":125,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"CFEA6A65-6254-48E3-8BB0-A4D7805C01AF",[],[],{"lastModified":11,"cacheTime":129,"version":130},1792368020587,"2.0",{"score":132,"band":133,"action":134,"scoredAt":135},55,"Medium","Plan remediation","2026-10-16T07:06:16.516034+00:00"]