[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-23368":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T00:21:03.480Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":346,"aliases":356,"duplicate_of":9,"upstream":360,"downstream":361,"duplicates":368,"related":369,"reserved_at":9,"published_at":370,"modified_at":371,"state":372,"summary":373,"references_raw":381,"kevs":448,"epss":449,"epss_history":452,"metrics":727,"affected":737},"CVE-2025-23368","A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-307","Improper Restriction of Excessive Authentication Attempts","The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame.","weakness","Draft","Base",[19,23,105,164,249,284,342],{"id":20,"name":21,"techniques":22},"CAPEC-16","Dictionary-based Password Attack",[],{"id":24,"name":25,"techniques":26},"CAPEC-49","Password Brute Forcing",[27],{"id":28,"name":29,"tactics":30,"countermeasures":34},"T1110.001","Password Guessing",[31],{"id":32,"name":33},"TA0031","Credential Access",[35,40,44,48,53,57,62,67,71,75,79,83,87,91,95,100],{"id":36,"name":37,"tactic":38},"D3-CCSA","Credential Compromise Scope Analysis",{"name":39},"Detect",{"id":41,"name":42,"tactic":43},"D3-AEM","Application Exception Monitoring",{"name":39},{"id":45,"name":46,"tactic":47},"D3-OPM","Operational Process Monitoring",{"name":39},{"id":49,"name":50,"tactic":51},"D3-CR","Credential Revocation",{"name":52},"Evict",{"id":54,"name":55,"tactic":56},"D3-ANCI","Authentication Cache Invalidation",{"name":52},{"id":58,"name":59,"tactic":60},"D3-DUC","Decoy User Credential",{"name":61},"Deceive",{"id":63,"name":64,"tactic":65},"D3-CH","Credential Hardening",{"name":66},"Harden",{"id":68,"name":69,"tactic":70},"D3-MFA","Multi-factor Authentication",{"name":66},{"id":72,"name":73,"tactic":74},"D3-CRO","Credential Rotation",{"name":66},{"id":76,"name":77,"tactic":78},"D3-PR","Password Rotation",{"name":66},{"id":80,"name":81,"tactic":82},"D3-PWA","Password Authentication",{"name":66},{"id":84,"name":85,"tactic":86},"D3-CDP","Change Default Password",{"name":66},{"id":88,"name":89,"tactic":90},"D3-SPP","Strong Password Policy",{"name":66},{"id":92,"name":93,"tactic":94},"D3-OTP","One-time Password",{"name":66},{"id":96,"name":97,"tactic":98},"D3-RIC","Reissue Credential",{"name":99},"Restore",{"id":101,"name":102,"tactic":103},"D3-CTS","Credential Transmission Scoping",{"name":104},"Isolate",{"id":106,"name":107,"techniques":108},"CAPEC-560","Use of Known Domain Credentials",[109],{"id":110,"name":111,"tactics":112,"countermeasures":128},"T1078","Valid Accounts",[113,116,119,122,125],{"id":114,"name":115},"TA0030","Defense Evasion",{"id":117,"name":118},"TA0005","Stealth",{"id":120,"name":121},"TA0110","Persistence",{"id":123,"name":124},"TA0111","Privilege Escalation",{"id":126,"name":127},"TA0108","Initial Access",[129,134,138,142,146,150,152,156,160],{"id":130,"name":131,"tactic":132},"D3-AM","Access Modeling",{"name":133},"Model",{"id":135,"name":136,"tactic":137},"D3-LAM","Local Account Monitoring",{"name":39},{"id":139,"name":140,"tactic":141},"D3-DAM","Domain Account Monitoring",{"name":39},{"id":143,"name":144,"tactic":145},"D3-AL","Account Locking",{"name":52},{"id":147,"name":148,"tactic":149},"D3-AA","Agent Authentication",{"name":66},{"id":84,"name":85,"tactic":151},{"name":66},{"id":153,"name":154,"tactic":155},"D3-ULA","Unlock Account",{"name":99},{"id":157,"name":158,"tactic":159},"D3-RUAA","Restore User Account Access",{"name":99},{"id":161,"name":162,"tactic":163},"D3-UAP","User Account Permissions",{"name":104},{"id":165,"name":166,"techniques":167},"CAPEC-565","Password Spraying",[168],{"id":169,"name":166,"tactics":170,"countermeasures":172},"T1110.003",[171],{"id":32,"name":33},[173,175,177,179,183,187,191,195,199,203,207,211,215,219,221,223,225,227,229,231,233,235,237,239,241,243,245],{"id":36,"name":37,"tactic":174},{"name":39},{"id":41,"name":42,"tactic":176},{"name":39},{"id":45,"name":46,"tactic":178},{"name":39},{"id":180,"name":181,"tactic":182},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":39},{"id":184,"name":185,"tactic":186},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":39},{"id":188,"name":189,"tactic":190},"D3-CSPP","Client-server Payload Profiling",{"name":39},{"id":192,"name":193,"tactic":194},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":39},{"id":196,"name":197,"tactic":198},"D3-NTSA","Network Traffic Signature Analysis",{"name":39},{"id":200,"name":201,"tactic":202},"D3-APCA","Application Protocol Command Analysis",{"name":39},{"id":204,"name":205,"tactic":206},"D3-NTCD","Network Traffic Community Deviation",{"name":39},{"id":208,"name":209,"tactic":210},"D3-RTSD","Remote Terminal Session Detection",{"name":39},{"id":212,"name":213,"tactic":214},"D3-CAA","Connection Attempt Analysis",{"name":39},{"id":216,"name":217,"tactic":218},"D3-ANAA","Administrative Network Activity Analysis",{"name":39},{"id":49,"name":50,"tactic":220},{"name":52},{"id":54,"name":55,"tactic":222},{"name":52},{"id":58,"name":59,"tactic":224},{"name":61},{"id":63,"name":64,"tactic":226},{"name":66},{"id":68,"name":69,"tactic":228},{"name":66},{"id":72,"name":73,"tactic":230},{"name":66},{"id":76,"name":77,"tactic":232},{"name":66},{"id":80,"name":81,"tactic":234},{"name":66},{"id":84,"name":85,"tactic":236},{"name":66},{"id":88,"name":89,"tactic":238},{"name":66},{"id":92,"name":93,"tactic":240},{"name":66},{"id":96,"name":97,"tactic":242},{"name":99},{"id":101,"name":102,"tactic":244},{"name":104},{"id":246,"name":247,"tactic":248},"D3-NTF","Network Traffic Filtering",{"name":104},{"id":250,"name":251,"techniques":252},"CAPEC-600","Credential Stuffing",[253],{"id":254,"name":251,"tactics":255,"countermeasures":257},"T1110.004",[256],{"id":32,"name":33},[258,260,262,264,266,268,270,272,274,276,278,280,282],{"id":41,"name":42,"tactic":259},{"name":39},{"id":45,"name":46,"tactic":261},{"name":39},{"id":180,"name":181,"tactic":263},{"name":39},{"id":184,"name":185,"tactic":265},{"name":39},{"id":188,"name":189,"tactic":267},{"name":39},{"id":192,"name":193,"tactic":269},{"name":39},{"id":196,"name":197,"tactic":271},{"name":39},{"id":200,"name":201,"tactic":273},{"name":39},{"id":204,"name":205,"tactic":275},{"name":39},{"id":208,"name":209,"tactic":277},{"name":39},{"id":212,"name":213,"tactic":279},{"name":39},{"id":216,"name":217,"tactic":281},{"name":39},{"id":246,"name":247,"tactic":283},{"name":104},{"id":285,"name":286,"techniques":287},"CAPEC-652","Use of Known Kerberos Credentials",[288],{"id":289,"name":290,"tactics":291,"countermeasures":293},"T1558","Steal or Forge Kerberos Tickets",[292],{"id":32,"name":33},[294,296,298,300,302,304,306,308,310,312,316,318,320,322,324,326,328,332,336,338,340],{"id":180,"name":181,"tactic":295},{"name":39},{"id":184,"name":185,"tactic":297},{"name":39},{"id":188,"name":189,"tactic":299},{"name":39},{"id":192,"name":193,"tactic":301},{"name":39},{"id":196,"name":197,"tactic":303},{"name":39},{"id":200,"name":201,"tactic":305},{"name":39},{"id":204,"name":205,"tactic":307},{"name":39},{"id":208,"name":209,"tactic":309},{"name":39},{"id":36,"name":37,"tactic":311},{"name":39},{"id":313,"name":314,"tactic":315},"D3-RTA","RPC Traffic Analysis",{"name":39},{"id":49,"name":50,"tactic":317},{"name":52},{"id":54,"name":55,"tactic":319},{"name":52},{"id":58,"name":59,"tactic":321},{"name":61},{"id":63,"name":64,"tactic":323},{"name":66},{"id":68,"name":69,"tactic":325},{"name":66},{"id":72,"name":73,"tactic":327},{"name":66},{"id":329,"name":330,"tactic":331},"D3-TB","Token Binding",{"name":66},{"id":333,"name":334,"tactic":335},"D3-TBA","Token-based Authentication",{"name":66},{"id":96,"name":97,"tactic":337},{"name":99},{"id":246,"name":247,"tactic":339},{"name":104},{"id":101,"name":102,"tactic":341},{"name":104},{"id":343,"name":344,"techniques":345},"CAPEC-653","Use of Known Operating System Credentials",[],[347],{"_key":348,"name":349,"source":350,"url":351,"maturity":352,"reliability_score":353,"verified":354,"type":9,"platforms":355,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_621BE6C819F16346","Exploit Reference (gruppotim.it)","reference","https://www.gruppotim.it/it/footer/red-team.html","unknown",0.2,false,[],[357,358,359],"GHSA-3jxr-23ph-c89g","GHSA-qhp6-6p8p-2rqh","GHSA-3JXR-23PH-C89G",[],[362,364,366],{"_key":363},"RHSA-2026:18054",{"_key":365},"RHSA-2026:18055",{"_key":367},"RHSA-2026:33371",[],[],"2025-03-04T15:14:47.806Z","2026-06-30T02:47:11.489Z","Modified",{"cisa_kev":354,"cisa_ransomware":354,"cisa_vendor":9,"epss_severity":374,"epss_score":375,"severity":376,"severity_score":377,"severity_version":378,"severity_source":379,"severity_vector":380,"severity_status":372},"low",0.00817,"high",8.1,"v3.1","cve.org","CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",[382,392,397,402,407,412,416,420,424,428,432,436,440,444],{"url":383,"sources":384,"tags":387},"https://access.redhat.com/security/cve/CVE-2025-23368",[379,385,386],"nvd","osv_maven",[388,389,390,391],"VDB Entry","X Refsource REDHAT","Vendor Advisory","WEB",{"url":393,"sources":394,"tags":395},"https://bugzilla.redhat.com/show_bug.cgi?id=2337621",[379,385,386],[396,389,390,391],"Issue Tracking",{"url":351,"sources":398,"tags":399},[379,385,386],[400,391,401],"Third Party Advisory","Exploit",{"url":403,"sources":404,"tags":405},"https://nvd.nist.gov/vuln/detail/CVE-2025-23368",[386],[406],"Advisory",{"url":408,"sources":409,"tags":410},"https://github.com/wildfly/wildfly-core",[386],[411],"PACKAGE",{"url":413,"sources":414,"tags":415},"https://github.com/wildfly/wildfly-core/security/advisories/GHSA-qhp6-6p8p-2rqh",[386],[391],{"url":417,"sources":418,"tags":419},"https://github.com/wildfly/wildfly-core/pull/6634",[386],[391],{"url":421,"sources":422,"tags":423},"https://github.com/wildfly/wildfly-core/pull/6635",[386],[391],{"url":425,"sources":426,"tags":427},"https://github.com/wildfly/wildfly-core/commit/11e873031c522a0b36afb59880ce4dd59efd0bc0",[386],[391],{"url":429,"sources":430,"tags":431},"https://github.com/wildfly/wildfly-core/commit/a6f9d7534aa44de741337756f8377ad3a81f7695",[386],[391],{"url":433,"sources":434,"tags":435},"https://access.redhat.com/errata/RHSA-2026:18059",[379,385,386],[390,389,391],{"url":437,"sources":438,"tags":439},"https://access.redhat.com/errata/RHSA-2026:18054",[379,385,386],[390,389,391],{"url":441,"sources":442,"tags":443},"https://access.redhat.com/errata/RHSA-2026:18055",[379,385,386],[390,389,391],{"url":445,"sources":446,"tags":447},"https://access.redhat.com/errata/RHSA-2026:33371",[379,386],[390,389,391],[],{"date":450,"score":375,"percentile":451},"2026-07-05",0.52693,[453,457,460,463,467,470,473,476,479,482,485,488,491,494,497,501,504,507,511,514,518,521,524,527,529,533,536,539,542,545,548,551,554,557,560,563,565,568,571,574,577,580,583,586,589,592,596,599,602,605,608,611,614,617,619,622,626,629,632,635,638,641,644,647,650,653,656,658,661,664,667,670,673,676,679,682,685,688,691,694,697,700,703,706,709,712,715,718,721,724],{"date":454,"score":455,"percentile":456},"2025-11-04",0.00135,0.34021,{"date":458,"score":455,"percentile":459},"2025-11-05",0.34009,{"date":461,"score":455,"percentile":462},"2025-11-06",0.34012,{"date":464,"score":465,"percentile":466},"2025-11-07",0.00182,0.40155,{"date":468,"score":465,"percentile":469},"2025-11-08",0.40148,{"date":471,"score":465,"percentile":472},"2025-11-09",0.40132,{"date":474,"score":465,"percentile":475},"2025-11-10",0.40096,{"date":477,"score":465,"percentile":478},"2025-11-11",0.40114,{"date":480,"score":465,"percentile":481},"2025-11-12",0.40146,{"date":483,"score":465,"percentile":484},"2025-11-13",0.40158,{"date":486,"score":465,"percentile":487},"2025-11-14",0.40157,{"date":489,"score":465,"percentile":490},"2025-11-15",0.40153,{"date":492,"score":465,"percentile":493},"2025-11-16",0.40135,{"date":495,"score":465,"percentile":496},"2025-11-17",0.40107,{"date":498,"score":499,"percentile":500},"2025-11-18",0.00299,0.50309,{"date":502,"score":499,"percentile":503},"2025-11-19",0.50322,{"date":505,"score":499,"percentile":506},"2025-11-20",0.50311,{"date":508,"score":509,"percentile":510},"2025-11-21",0.00198,0.42083,{"date":512,"score":509,"percentile":513},"2025-11-22",0.42084,{"date":515,"score":516,"percentile":517},"2025-11-23",0.00183,0.40251,{"date":519,"score":516,"percentile":520},"2025-11-24",0.40241,{"date":522,"score":516,"percentile":523},"2025-11-25",0.40252,{"date":525,"score":516,"percentile":526},"2025-11-26",0.40244,{"date":528,"score":516,"percentile":523},"2025-11-27",{"date":530,"score":531,"percentile":532},"2025-11-28",0.00188,0.4075,{"date":534,"score":531,"percentile":535},"2025-11-29",0.40727,{"date":537,"score":531,"percentile":538},"2025-11-30",0.40704,{"date":540,"score":531,"percentile":541},"2025-12-01",0.40823,{"date":543,"score":531,"percentile":544},"2025-12-02",0.40828,{"date":546,"score":531,"percentile":547},"2025-12-03",0.4083,{"date":549,"score":531,"percentile":550},"2025-12-04",0.40697,{"date":552,"score":531,"percentile":553},"2025-12-05",0.40726,{"date":555,"score":531,"percentile":556},"2025-12-06",0.40722,{"date":558,"score":531,"percentile":559},"2025-12-07",0.40701,{"date":561,"score":531,"percentile":562},"2025-12-08",0.40711,{"date":564,"score":531,"percentile":532},"2025-12-09",{"date":566,"score":531,"percentile":567},"2025-12-10",0.40809,{"date":569,"score":531,"percentile":570},"2025-12-11",0.40839,{"date":572,"score":531,"percentile":573},"2025-12-12",0.40871,{"date":575,"score":531,"percentile":576},"2025-12-13",0.40851,{"date":578,"score":531,"percentile":579},"2025-12-14",0.4081,{"date":581,"score":531,"percentile":582},"2025-12-15",0.40791,{"date":584,"score":531,"percentile":585},"2025-12-16",0.40824,{"date":587,"score":531,"percentile":588},"2025-12-17",0.40865,{"date":590,"score":531,"percentile":591},"2025-12-18",0.40912,{"date":593,"score":594,"percentile":595},"2025-12-19",0.00203,0.42703,{"date":597,"score":594,"percentile":598},"2025-12-20",0.42679,{"date":600,"score":594,"percentile":601},"2025-12-21",0.4264,{"date":603,"score":594,"percentile":604},"2025-12-22",0.42615,{"date":606,"score":594,"percentile":607},"2025-12-23",0.42616,{"date":609,"score":594,"percentile":610},"2025-12-24",0.42629,{"date":612,"score":594,"percentile":613},"2025-12-25",0.42674,{"date":615,"score":594,"percentile":616},"2025-12-26",0.42655,{"date":618,"score":594,"percentile":613},"2025-12-27",{"date":620,"score":594,"percentile":621},"2025-12-28",0.42579,{"date":623,"score":624,"percentile":625},"2025-12-29",0.00226,0.45273,{"date":627,"score":624,"percentile":628},"2025-12-30",0.45269,{"date":630,"score":624,"percentile":631},"2025-12-31",0.45312,{"date":633,"score":624,"percentile":634},"2026-01-01",0.45458,{"date":636,"score":624,"percentile":637},"2026-01-02",0.45436,{"date":639,"score":624,"percentile":640},"2026-01-03",0.45423,{"date":642,"score":624,"percentile":643},"2026-01-04",0.45253,{"date":645,"score":624,"percentile":646},"2026-01-05",0.45238,{"date":648,"score":624,"percentile":649},"2026-01-06",0.45243,{"date":651,"score":624,"percentile":652},"2026-01-07",0.45261,{"date":654,"score":624,"percentile":655},"2026-01-08",0.45287,{"date":657,"score":624,"percentile":652},"2026-01-09",{"date":659,"score":624,"percentile":660},"2026-01-10",0.45255,{"date":662,"score":624,"percentile":663},"2026-01-11",0.45234,{"date":665,"score":624,"percentile":666},"2026-01-12",0.45184,{"date":668,"score":624,"percentile":669},"2026-01-13",0.4516,{"date":671,"score":624,"percentile":672},"2026-01-14",0.45209,{"date":674,"score":624,"percentile":675},"2026-01-15",0.45205,{"date":677,"score":624,"percentile":678},"2026-01-16",0.45224,{"date":680,"score":624,"percentile":681},"2026-01-17",0.45199,{"date":683,"score":624,"percentile":684},"2026-01-18",0.4517,{"date":686,"score":624,"percentile":687},"2026-01-19",0.45139,{"date":689,"score":624,"percentile":690},"2026-01-20",0.45135,{"date":692,"score":624,"percentile":693},"2026-01-21",0.45138,{"date":695,"score":624,"percentile":696},"2026-01-22",0.45142,{"date":698,"score":624,"percentile":699},"2026-01-23",0.45192,{"date":701,"score":624,"percentile":702},"2026-01-24",0.45201,{"date":704,"score":624,"percentile":705},"2026-01-25",0.45145,{"date":707,"score":624,"percentile":708},"2026-01-26",0.45104,{"date":710,"score":624,"percentile":711},"2026-01-27",0.45108,{"date":713,"score":624,"percentile":714},"2026-01-28",0.45112,{"date":716,"score":624,"percentile":717},"2026-01-29",0.45102,{"date":719,"score":624,"percentile":720},"2026-01-30",0.45113,{"date":722,"score":624,"percentile":723},"2026-01-31",0.4512,{"date":725,"score":624,"percentile":726},"2026-02-01",0.45248,[728,733,735],{"source":379,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":729,"cvss_v4_0":9},{"baseScore":377,"baseSeverity":730,"vectorString":380,"impactScore":731,"exploitabilityScore":732},"HIGH",9.8,5.6,{"source":385,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":734,"cvss_v4_0":9},{"baseScore":377,"baseSeverity":730,"vectorString":380,"impactScore":731,"exploitabilityScore":732},{"source":386,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":736,"cvss_v4_0":9},{"baseScore":377,"baseSeverity":9,"vectorString":380,"impactScore":731,"exploitabilityScore":732},[738,759,768,776,783],{"ecosystem":739,"name":740,"vendor":741,"product":742,"cpe_part":9,"purl_type":743,"purl_namespace":741,"purl_name":742,"source":9,"versions":744},"Maven","org.wildfly.core:wildfly-elytron-integration","org.wildfly.core","wildfly-elytron-integration","maven",[745,753,756],{"version":746,"is_range":747,"range_type":748,"version_start":749,"version_start_type":750,"version_end":751,"version_end_type":752,"fixed_in":9},"gte32_0_0_Beta1_lt32_0_0_Beta3",true,"ecosystem","32.0.0.Beta1","including","32.0.0.Beta3","excluding",{"version":754,"is_range":747,"range_type":748,"version_start":9,"version_start_type":9,"version_end":755,"version_end_type":752,"fixed_in":9},"lt31_0_3_Final","31.0.3.Final",{"version":757,"is_range":747,"range_type":748,"version_start":9,"version_start_type":9,"version_end":758,"version_end_type":750,"fixed_in":9},"lte27_0_0_Final","27.0.0.Final",{"ecosystem":9,"name":760,"vendor":761,"product":762,"cpe_part":763,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":764},"data grid","redhat","data_grid","a",[765],{"version":766,"is_range":354,"range_type":767,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"8.0","cpe",{"ecosystem":9,"name":769,"vendor":761,"product":770,"cpe_part":763,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":771},"jboss enterprise application platform","jboss_enterprise_application_platform",[772,774],{"version":773,"is_range":354,"range_type":767,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0.0",{"version":775,"is_range":354,"range_type":767,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"8.0.0",{"ecosystem":9,"name":777,"vendor":761,"product":778,"cpe_part":763,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":779},"wildfly core","wildfly_core",[780],{"version":781,"is_range":747,"range_type":767,"version_start":9,"version_start_type":9,"version_end":782,"version_end_type":752,"fixed_in":9},"lt31.0.3","31.0.3",{"ecosystem":9,"name":784,"vendor":761,"product":785,"cpe_part":763,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":786},"wildfly elytron","wildfly_elytron",[787],{"version":788,"is_range":354,"range_type":767,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"na"]