CVE-2025-23368
Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli
8.1 HighFix available
A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
0.89%Up 0.8 points since Mar 5, 2025
What each source reports
CVE List Score used
Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli
A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI.
- Record
CVE-2025-23368- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-307
- Updated
- 2026-11-04
EUVDEUVD-2025-7628
A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI.
- Record
EUVD-2025-7628- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-04
GitHub AdvisoriesGHSA-3jxr-23ph-c89g
Duplicate Advisory: Wildfly Elytron integration susceptible to brute force attacks via CLI
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-qhp6-6p8p-2rqh. This link is maintained to preserve external references.
Original Description
A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI.
- Record
GHSA-3jxr-23ph-c89g- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-307
- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-qhp6-6p8p-2rqh
Wildfly Elytron integration susceptible to brute force attacks via CLI
Impact
A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI.
Patches
The default behaviour has been changed in WildFly Core 31.0.3.Final, and 32.0.0.Beta3 - the first version is used by WildFly 39.0.1.Final and the second will be included in WildFly 40.
Workarounds
No direct workaround. Monitoring network traffic / blocking suspicious traffic may help.
References
https://www.cve.org/CVERecord?id=CVE-2025-23368 https://issues.redhat.com/browse/WFCORE-7192
Acknowledgements
We would like to thank Claudia Bartolini (TIM S.p.A), Marco Ventura (TIM S.p.A), and Massimiliano Brolli (TIM S.p.A) for reporting this issue.
- Record
GHSA-qhp6-6p8p-2rqh- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-307
- Updated
- 2026-11-02
NVD
A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI.
- Record
CVE-2025-23368- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-307
- Updated
- 2026-11-04
OSV
Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli
A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI.
- Record
CVE-2025-23368- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-307
- Updated
- 2026-11-05
Show 5 moreShow less
OSVGHSA-3jxr-23ph-c89g
Duplicate Advisory: Wildfly Elytron integration susceptible to brute force attacks via CLI
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-qhp6-6p8p-2rqh. This link is maintained to preserve external references.
Original Description
A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI.
- Record
GHSA-3jxr-23ph-c89g- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-307
- Updated
- 2026-11-02
OSVGHSA-qhp6-6p8p-2rqh
Wildfly Elytron integration susceptible to brute force attacks via CLI
Impact
A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI.
Patches
The default behaviour has been changed in WildFly Core 31.0.3.Final, and 32.0.0.Beta3 - the first version is used by WildFly 39.0.1.Final and the second will be included in WildFly 40.
Workarounds
No direct workaround. Monitoring network traffic / blocking suspicious traffic may help.
References
https://www.cve.org/CVERecord?id=CVE-2025-23368 https://issues.redhat.com/browse/WFCORE-7192
Acknowledgements
We would like to thank Claudia Bartolini (TIM S.p.A), Marco Ventura (TIM S.p.A), and Massimiliano Brolli (TIM S.p.A) for reporting this issue.
- Record
GHSA-qhp6-6p8p-2rqh- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-307
- Updated
- 2026-11-02
OSVRHSA-2026:18054
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.6 security update
- Record
RHSA-2026:18054- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:18055
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.6 security update
- Record
RHSA-2026:18055- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2026:33371
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.18 security update
- Record
RHSA-2026:33371- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L - Updated
- 2026-11-02
Affected products
- red hat build of keycloak
- red hat data grid 8
- red hat fuse 7
- red hat integration camel k 1
- red hat jboss data grid 7
- red hat jboss enterprise application platform 7
- red hat jboss enterprise application platform 7.3 eus for rhel 7
- red hat jboss enterprise application platform 8.1 for rhel 8
- red hat jboss enterprise application platform 8.1 for rhel 9
- red hat jboss enterprise application platform 8.1.6.ga
- red hat jboss enterprise application platform expansion pack
- red hat process automation 7
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.wildfly.core:wildfly-elytron-integrationMaven |
32.0.0.Beta1 up to 32.0.0.Beta3 | 32.0.0.Beta3 |
org.wildfly.core:wildfly-elytron-integrationMaven |
before 31.0.3.Final | 31.0.3.Final |
org.wildfly.core:wildfly-elytron-integrationMaven |
32.0.0.Beta1 up to 32.0.0.Beta3, plus listed versions 32.0.0.Beta2 |
32.0.0.Beta3 |
org.wildfly.core:wildfly-elytron-integrationMaven |
before 31.0.3.Final, plus listed versions 10.0.0.Beta110.0.0.Beta210.0.0.Beta310.0.0.Beta410.0.0.Beta5 Show 45 moreShow less10.0.0.Beta610.0.0.Beta710.0.0.Beta810.0.0.Beta910.0.0.CR110.0.0.Final10.0.2.Final10.0.3.Final11.0.0.Beta111.0.0.Beta1011.0.0.Beta211.0.0.Beta311.0.0.Beta411.0.0.Beta511.0.0.Beta611.0.0.Beta711.0.0.Beta811.0.0.Beta911.0.0.Final11.1.0.Final11.1.1.Final12.0.0.Beta112.0.0.Beta212.0.0.Beta312.0.0.Beta412.0.0.Final12.0.1.Final12.0.3.Final13.0.0.Beta113.0.0.Beta213.0.0.Beta313.0.0.Beta413.0.0.Beta513.0.0.Beta613.0.0.Final13.0.1.Final13.0.2.Final13.0.3.Final14.0.0.Beta114.0.0.Beta214.0.0.Beta314.0.0.Beta414.0.0.Beta514.0.0.Final14.0.1.Final |
31.0.3.Final |
eap8-bouncycastleRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:1.84.0-1.redhat_00001.1.el8eap | 0:1.84.0-1.redhat_00001.1.el8eap |
eap8-bouncycastle-jmailRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:1.84.0-1.redhat_00001.1.el8eap | 0:1.84.0-1.redhat_00001.1.el8eap |
eap8-bouncycastle-pgRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:1.84.0-1.redhat_00001.1.el8eap | 0:1.84.0-1.redhat_00001.1.el8eap |
eap8-bouncycastle-pkixRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:1.84.0-1.redhat_00001.1.el8eap | 0:1.84.0-1.redhat_00001.1.el8eap |
eap8-bouncycastle-provRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:1.84.0-1.redhat_00001.1.el8eap | 0:1.84.0-1.redhat_00001.1.el8eap |
eap8-bouncycastle-utilRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:1.84.0-1.redhat_00001.1.el8eap | 0:1.84.0-1.redhat_00001.1.el8eap |
Show 174 moreShow less
| Package | Affected | Fixed |
|---|---|---|
eap8-wildflyRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:8.1.6-5.GA_redhat_00007.1.el8eap | 0:8.1.6-5.GA_redhat_00007.1.el8eap |
eap8-wildfly-java-jdk17Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:8.1.6-5.GA_redhat_00007.1.el8eap | 0:8.1.6-5.GA_redhat_00007.1.el8eap |
eap8-wildfly-java-jdk21Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:8.1.6-5.GA_redhat_00007.1.el8eap | 0:8.1.6-5.GA_redhat_00007.1.el8eap |
eap8-wildfly-modulesRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:8.1.6-5.GA_redhat_00007.1.el8eap | 0:8.1.6-5.GA_redhat_00007.1.el8eap |
eap8-activemq-artemisRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-activemq-artemis-cliRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-activemq-artemis-commonsRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-activemq-artemis-core-clientRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-activemq-artemis-dtoRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-activemq-artemis-hornetq-protocolRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-activemq-artemis-hqclient-protocolRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-activemq-artemis-jakarta-clientRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-activemq-artemis-jakarta-raRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-activemq-artemis-jakarta-serverRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-activemq-artemis-jakarta-service-extensionsRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-activemq-artemis-jdbc-storeRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-activemq-artemis-journalRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-activemq-artemis-selectorRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-activemq-artemis-serverRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el8eap | 0:2.40.0-6.redhat_00012.1.el8eap |
eap8-angusRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.0.5-1.redhat_00001.1.el8eap | 0:2.0.5-1.redhat_00001.1.el8eap |
eap8-angus-activationRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.0.3-1.redhat_00001.1.el8eap | 0:2.0.3-1.redhat_00001.1.el8eap |
eap8-angus-mailRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.0.5-1.redhat_00001.1.el8eap | 0:2.0.5-1.redhat_00001.1.el8eap |
eap8-eap-product-conf-parentRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:801.6.0-1.GA_redhat_00001.1.el8eap | 0:801.6.0-1.GA_redhat_00001.1.el8eap |
eap8-eap-product-conf-wildfly-ee-feature-packRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:801.6.0-1.GA_redhat_00001.1.el8eap | 0:801.6.0-1.GA_redhat_00001.1.el8eap |
eap8-guavaRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:33.0.0-3.jre_redhat_00004.1.el8eap | 0:33.0.0-3.jre_redhat_00004.1.el8eap |
eap8-guava-failureaccessRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:1.0.3-1.redhat_00001.1.el8eap | 0:1.0.3-1.redhat_00001.1.el8eap |
eap8-guava-librariesRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:33.0.0-3.jre_redhat_00004.1.el8eap | 0:33.0.0-3.jre_redhat_00004.1.el8eap |
eap8-hal-consoleRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:3.7.19-1.Final_redhat_00001.1.el8eap | 0:3.7.19-1.Final_redhat_00001.1.el8eap |
eap8-hibernateRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:6.6.48-1.Final_redhat_00001.1.el8eap | 0:6.6.48-1.Final_redhat_00001.1.el8eap |
eap8-hibernate-coreRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:6.6.48-1.Final_redhat_00001.1.el8eap | 0:6.6.48-1.Final_redhat_00001.1.el8eap |
eap8-hibernate-enversRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:6.6.48-1.Final_redhat_00001.1.el8eap | 0:6.6.48-1.Final_redhat_00001.1.el8eap |
eap8-hibernate-searchRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:7.2.6-1.Final_redhat_00001.1.el8eap | 0:7.2.6-1.Final_redhat_00001.1.el8eap |
eap8-hibernate-search-backend-elasticsearchRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:7.2.6-1.Final_redhat_00001.1.el8eap | 0:7.2.6-1.Final_redhat_00001.1.el8eap |
eap8-hibernate-search-backend-luceneRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:7.2.6-1.Final_redhat_00001.1.el8eap | 0:7.2.6-1.Final_redhat_00001.1.el8eap |
eap8-hibernate-search-engineRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:7.2.6-1.Final_redhat_00001.1.el8eap | 0:7.2.6-1.Final_redhat_00001.1.el8eap |
eap8-hibernate-search-mapper-ormRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:7.2.6-1.Final_redhat_00001.1.el8eap | 0:7.2.6-1.Final_redhat_00001.1.el8eap |
eap8-hibernate-search-mapper-pojo-baseRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:7.2.6-1.Final_redhat_00001.1.el8eap | 0:7.2.6-1.Final_redhat_00001.1.el8eap |
eap8-hibernate-search-util-commonRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:7.2.6-1.Final_redhat_00001.1.el8eap | 0:7.2.6-1.Final_redhat_00001.1.el8eap |
eap8-jakarta-activationRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.1.4-1.redhat_00001.1.el8eap | 0:2.1.4-1.redhat_00001.1.el8eap |
eap8-jboss-loggingRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:3.6.2-1.Final_redhat_00001.1.el8eap | 0:3.6.2-1.Final_redhat_00001.1.el8eap |
eap8-jboss-metadataRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:16.1.0-1.Final_redhat_00001.1.el8eap | 0:16.1.0-1.Final_redhat_00001.1.el8eap |
eap8-jboss-metadata-appclientRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:16.1.0-1.Final_redhat_00001.1.el8eap | 0:16.1.0-1.Final_redhat_00001.1.el8eap |
eap8-jboss-metadata-commonRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:16.1.0-1.Final_redhat_00001.1.el8eap | 0:16.1.0-1.Final_redhat_00001.1.el8eap |
eap8-jboss-metadata-earRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:16.1.0-1.Final_redhat_00001.1.el8eap | 0:16.1.0-1.Final_redhat_00001.1.el8eap |
eap8-jboss-metadata-ejbRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:16.1.0-1.Final_redhat_00001.1.el8eap | 0:16.1.0-1.Final_redhat_00001.1.el8eap |
eap8-jboss-metadata-webRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:16.1.0-1.Final_redhat_00001.1.el8eap | 0:16.1.0-1.Final_redhat_00001.1.el8eap |
eap8-jctoolsRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.0.6-1.redhat_00001.1.el8eap | 0:4.0.6-1.redhat_00001.1.el8eap |
eap8-jctools-coreRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.0.6-1.redhat_00001.1.el8eap | 0:4.0.6-1.redhat_00001.1.el8eap |
eap8-nettyRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-bufferRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-codecRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-codec-dnsRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-codec-httpRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-codec-socksRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-commonRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-handlerRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-handler-proxyRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-resolverRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-resolver-dnsRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-transportRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-transport-classes-epollRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-transport-native-epollRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-transport-native-epoll-debuginfoRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-netty-transport-native-unix-commonRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el8eap | 0:4.1.132-1.Final_redhat_00001.1.el8eap |
eap8-plexus-utilsRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:3.6.1-1.redhat_00001.1.el8eap | 0:3.6.1-1.redhat_00001.1.el8eap |
eap8-reactivex-rxjavaRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:3.1.12-1.redhat_00001.1.el8eap | 0:3.1.12-1.redhat_00001.1.el8eap |
eap8-reactivex-rxjava2Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.2.21-5.redhat_00003.1.el8eap | 0:2.2.21-5.redhat_00003.1.el8eap |
eap8-wildfly-client-configRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:1.0.1-4.Final_redhat_00002.1.el8eap | 0:1.0.1-4.Final_redhat_00002.1.el8eap |
eap8-wildfly-http-clientRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.1.4-1.Final_redhat_00001.1.el8eap | 0:2.1.4-1.Final_redhat_00001.1.el8eap |
eap8-wildfly-http-client-commonRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.1.4-1.Final_redhat_00001.1.el8eap | 0:2.1.4-1.Final_redhat_00001.1.el8eap |
eap8-wildfly-http-ejb-clientRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.1.4-1.Final_redhat_00001.1.el8eap | 0:2.1.4-1.Final_redhat_00001.1.el8eap |
eap8-wildfly-http-naming-clientRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.1.4-1.Final_redhat_00001.1.el8eap | 0:2.1.4-1.Final_redhat_00001.1.el8eap |
eap8-wildfly-http-transaction-clientRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.1.4-1.Final_redhat_00001.1.el8eap | 0:2.1.4-1.Final_redhat_00001.1.el8eap |
eap8-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:8.1.1-10.GA_redhat_00017.1.el8eap | 0:8.1.1-10.GA_redhat_00017.1.el8eap |
eap8-wildfly-opensslRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.3.0-1.Final_redhat_00001.1.el8eap | 0:2.3.0-1.Final_redhat_00001.1.el8eap |
eap8-wildfly-openssl-el8-x86_64Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.3.0-1.Final.redhat.00001.1.el8eap | 0:2.3.0-1.Final.redhat.00001.1.el8eap |
eap8-wildfly-openssl-el8-x86_64-debuginfoRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.3.0-1.Final.redhat.00001.1.el8eap | 0:2.3.0-1.Final.redhat.00001.1.el8eap |
eap8-wildfly-openssl-javaRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:2.3.0-1.Final_redhat_00001.1.el8eap | 0:2.3.0-1.Final_redhat_00001.1.el8eap |
eap8-yassonRed Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 14 CVEs |
before 0:3.0.4-5.redhat_00007.1.el8eap | 0:3.0.4-5.redhat_00007.1.el8eap |
eap8-bouncycastleRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:1.84.0-1.redhat_00001.1.el9eap | 0:1.84.0-1.redhat_00001.1.el9eap |
eap8-bouncycastle-jmailRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:1.84.0-1.redhat_00001.1.el9eap | 0:1.84.0-1.redhat_00001.1.el9eap |
eap8-bouncycastle-pgRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:1.84.0-1.redhat_00001.1.el9eap | 0:1.84.0-1.redhat_00001.1.el9eap |
eap8-bouncycastle-pkixRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:1.84.0-1.redhat_00001.1.el9eap | 0:1.84.0-1.redhat_00001.1.el9eap |
eap8-bouncycastle-provRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:1.84.0-1.redhat_00001.1.el9eap | 0:1.84.0-1.redhat_00001.1.el9eap |
eap8-bouncycastle-utilRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:1.84.0-1.redhat_00001.1.el9eap | 0:1.84.0-1.redhat_00001.1.el9eap |
eap8-wildflyRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:8.1.6-5.GA_redhat_00007.1.el9eap | 0:8.1.6-5.GA_redhat_00007.1.el9eap |
eap8-wildfly-java-jdk17Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:8.1.6-5.GA_redhat_00007.1.el9eap | 0:8.1.6-5.GA_redhat_00007.1.el9eap |
eap8-wildfly-java-jdk21Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:8.1.6-5.GA_redhat_00007.1.el9eap | 0:8.1.6-5.GA_redhat_00007.1.el9eap |
eap8-wildfly-modulesRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:8.1.6-5.GA_redhat_00007.1.el9eap | 0:8.1.6-5.GA_redhat_00007.1.el9eap |
eap8-activemq-artemisRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el9eap | 0:2.40.0-6.redhat_00012.1.el9eap |
eap8-activemq-artemis-cliRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el9eap | 0:2.40.0-6.redhat_00012.1.el9eap |
eap8-activemq-artemis-commonsRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el9eap | 0:2.40.0-6.redhat_00012.1.el9eap |
eap8-activemq-artemis-core-clientRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el9eap | 0:2.40.0-6.redhat_00012.1.el9eap |
eap8-activemq-artemis-dtoRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el9eap | 0:2.40.0-6.redhat_00012.1.el9eap |
eap8-activemq-artemis-hornetq-protocolRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el9eap | 0:2.40.0-6.redhat_00012.1.el9eap |
eap8-activemq-artemis-hqclient-protocolRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el9eap | 0:2.40.0-6.redhat_00012.1.el9eap |
eap8-activemq-artemis-jakarta-clientRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el9eap | 0:2.40.0-6.redhat_00012.1.el9eap |
eap8-activemq-artemis-jakarta-raRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el9eap | 0:2.40.0-6.redhat_00012.1.el9eap |
eap8-activemq-artemis-jakarta-serverRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el9eap | 0:2.40.0-6.redhat_00012.1.el9eap |
eap8-activemq-artemis-jakarta-service-extensionsRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el9eap | 0:2.40.0-6.redhat_00012.1.el9eap |
eap8-activemq-artemis-jdbc-storeRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el9eap | 0:2.40.0-6.redhat_00012.1.el9eap |
eap8-activemq-artemis-journalRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el9eap | 0:2.40.0-6.redhat_00012.1.el9eap |
eap8-activemq-artemis-selectorRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el9eap | 0:2.40.0-6.redhat_00012.1.el9eap |
eap8-activemq-artemis-serverRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:2.40.0-6.redhat_00012.1.el9eap | 0:2.40.0-6.redhat_00012.1.el9eap |
eap8-angusRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:2.0.5-1.redhat_00001.1.el9eap | 0:2.0.5-1.redhat_00001.1.el9eap |
eap8-angus-activationRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:2.0.3-1.redhat_00001.1.el9eap | 0:2.0.3-1.redhat_00001.1.el9eap |
eap8-angus-mailRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:2.0.5-1.redhat_00001.1.el9eap | 0:2.0.5-1.redhat_00001.1.el9eap |
eap8-eap-product-conf-parentRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:801.6.0-1.GA_redhat_00001.1.el9eap | 0:801.6.0-1.GA_redhat_00001.1.el9eap |
eap8-eap-product-conf-wildfly-ee-feature-packRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:801.6.0-1.GA_redhat_00001.1.el9eap | 0:801.6.0-1.GA_redhat_00001.1.el9eap |
eap8-guavaRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:33.0.0-3.jre_redhat_00004.1.el9eap | 0:33.0.0-3.jre_redhat_00004.1.el9eap |
eap8-guava-failureaccessRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:1.0.3-1.redhat_00001.1.el9eap | 0:1.0.3-1.redhat_00001.1.el9eap |
eap8-guava-librariesRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:33.0.0-3.jre_redhat_00004.1.el9eap | 0:33.0.0-3.jre_redhat_00004.1.el9eap |
eap8-hal-consoleRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:3.7.19-1.Final_redhat_00001.1.el9eap | 0:3.7.19-1.Final_redhat_00001.1.el9eap |
eap8-hibernateRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:6.6.48-1.Final_redhat_00001.1.el9eap | 0:6.6.48-1.Final_redhat_00001.1.el9eap |
eap8-hibernate-coreRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:6.6.48-1.Final_redhat_00001.1.el9eap | 0:6.6.48-1.Final_redhat_00001.1.el9eap |
eap8-hibernate-enversRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:6.6.48-1.Final_redhat_00001.1.el9eap | 0:6.6.48-1.Final_redhat_00001.1.el9eap |
eap8-hibernate-searchRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:7.2.6-1.Final_redhat_00001.1.el9eap | 0:7.2.6-1.Final_redhat_00001.1.el9eap |
eap8-hibernate-search-backend-elasticsearchRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:7.2.6-1.Final_redhat_00001.1.el9eap | 0:7.2.6-1.Final_redhat_00001.1.el9eap |
eap8-hibernate-search-backend-luceneRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:7.2.6-1.Final_redhat_00001.1.el9eap | 0:7.2.6-1.Final_redhat_00001.1.el9eap |
eap8-hibernate-search-engineRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:7.2.6-1.Final_redhat_00001.1.el9eap | 0:7.2.6-1.Final_redhat_00001.1.el9eap |
eap8-hibernate-search-mapper-ormRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:7.2.6-1.Final_redhat_00001.1.el9eap | 0:7.2.6-1.Final_redhat_00001.1.el9eap |
eap8-hibernate-search-mapper-pojo-baseRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:7.2.6-1.Final_redhat_00001.1.el9eap | 0:7.2.6-1.Final_redhat_00001.1.el9eap |
eap8-hibernate-search-util-commonRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:7.2.6-1.Final_redhat_00001.1.el9eap | 0:7.2.6-1.Final_redhat_00001.1.el9eap |
eap8-jakarta-activationRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:2.1.4-1.redhat_00001.1.el9eap | 0:2.1.4-1.redhat_00001.1.el9eap |
eap8-jboss-loggingRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:3.6.2-1.Final_redhat_00001.1.el9eap | 0:3.6.2-1.Final_redhat_00001.1.el9eap |
eap8-jboss-metadataRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:16.1.0-1.Final_redhat_00001.1.el9eap | 0:16.1.0-1.Final_redhat_00001.1.el9eap |
eap8-jboss-metadata-appclientRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:16.1.0-1.Final_redhat_00001.1.el9eap | 0:16.1.0-1.Final_redhat_00001.1.el9eap |
eap8-jboss-metadata-commonRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:16.1.0-1.Final_redhat_00001.1.el9eap | 0:16.1.0-1.Final_redhat_00001.1.el9eap |
eap8-jboss-metadata-earRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:16.1.0-1.Final_redhat_00001.1.el9eap | 0:16.1.0-1.Final_redhat_00001.1.el9eap |
eap8-jboss-metadata-ejbRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:16.1.0-1.Final_redhat_00001.1.el9eap | 0:16.1.0-1.Final_redhat_00001.1.el9eap |
eap8-jboss-metadata-webRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:16.1.0-1.Final_redhat_00001.1.el9eap | 0:16.1.0-1.Final_redhat_00001.1.el9eap |
eap8-jctoolsRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:4.0.6-1.redhat_00001.1.el9eap | 0:4.0.6-1.redhat_00001.1.el9eap |
eap8-jctools-coreRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:4.0.6-1.redhat_00001.1.el9eap | 0:4.0.6-1.redhat_00001.1.el9eap |
eap8-nettyRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el9eap | 0:4.1.132-1.Final_redhat_00001.1.el9eap |
eap8-netty-bufferRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el9eap | 0:4.1.132-1.Final_redhat_00001.1.el9eap |
eap8-netty-codecRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el9eap | 0:4.1.132-1.Final_redhat_00001.1.el9eap |
eap8-netty-codec-dnsRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el9eap | 0:4.1.132-1.Final_redhat_00001.1.el9eap |
eap8-netty-codec-httpRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el9eap | 0:4.1.132-1.Final_redhat_00001.1.el9eap |
eap8-netty-codec-socksRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el9eap | 0:4.1.132-1.Final_redhat_00001.1.el9eap |
eap8-netty-commonRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el9eap | 0:4.1.132-1.Final_redhat_00001.1.el9eap |
eap8-netty-handlerRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el9eap | 0:4.1.132-1.Final_redhat_00001.1.el9eap |
eap8-netty-handler-proxyRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el9eap | 0:4.1.132-1.Final_redhat_00001.1.el9eap |
eap8-netty-resolverRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el9eap | 0:4.1.132-1.Final_redhat_00001.1.el9eap |
eap8-netty-resolver-dnsRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el9eap | 0:4.1.132-1.Final_redhat_00001.1.el9eap |
eap8-netty-transportRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el9eap | 0:4.1.132-1.Final_redhat_00001.1.el9eap |
eap8-netty-transport-classes-epollRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el9eap | 0:4.1.132-1.Final_redhat_00001.1.el9eap |
eap8-netty-transport-native-epollRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el9eap | 0:4.1.132-1.Final_redhat_00001.1.el9eap |
eap8-netty-transport-native-epoll-debuginfoRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el9eap | 0:4.1.132-1.Final_redhat_00001.1.el9eap |
eap8-netty-transport-native-unix-commonRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:4.1.132-1.Final_redhat_00001.1.el9eap | 0:4.1.132-1.Final_redhat_00001.1.el9eap |
eap8-plexus-utilsRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:3.6.1-1.redhat_00001.1.el9eap | 0:3.6.1-1.redhat_00001.1.el9eap |
eap8-reactivex-rxjavaRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:3.1.12-1.redhat_00001.1.el9eap | 0:3.1.12-1.redhat_00001.1.el9eap |
eap8-reactivex-rxjava2Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:2.2.21-5.redhat_00003.1.el9eap | 0:2.2.21-5.redhat_00003.1.el9eap |
eap8-wildfly-client-configRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:1.0.1-4.Final_redhat_00002.1.el9eap | 0:1.0.1-4.Final_redhat_00002.1.el9eap |
eap8-wildfly-http-clientRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:2.1.4-1.Final_redhat_00001.1.el9eap | 0:2.1.4-1.Final_redhat_00001.1.el9eap |
eap8-wildfly-http-client-commonRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:2.1.4-1.Final_redhat_00001.1.el9eap | 0:2.1.4-1.Final_redhat_00001.1.el9eap |
eap8-wildfly-http-ejb-clientRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:2.1.4-1.Final_redhat_00001.1.el9eap | 0:2.1.4-1.Final_redhat_00001.1.el9eap |
eap8-wildfly-http-naming-clientRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:2.1.4-1.Final_redhat_00001.1.el9eap | 0:2.1.4-1.Final_redhat_00001.1.el9eap |
eap8-wildfly-http-transaction-clientRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:2.1.4-1.Final_redhat_00001.1.el9eap | 0:2.1.4-1.Final_redhat_00001.1.el9eap |
eap8-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:8.1.1-10.GA_redhat_00017.1.el9eap | 0:8.1.1-10.GA_redhat_00017.1.el9eap |
eap8-wildfly-opensslRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:2.3.0-1.Final_redhat_00001.1.el9eap | 0:2.3.0-1.Final_redhat_00001.1.el9eap |
eap8-wildfly-openssl-el9-x86_64Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:2.3.0-1.Final_redhat_00001.1.el9eap | 0:2.3.0-1.Final_redhat_00001.1.el9eap |
eap8-wildfly-openssl-el9-x86_64-debuginfoRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:2.3.0-1.Final_redhat_00001.1.el9eap | 0:2.3.0-1.Final_redhat_00001.1.el9eap |
eap8-wildfly-openssl-javaRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:2.3.0-1.Final_redhat_00001.1.el9eap | 0:2.3.0-1.Final_redhat_00001.1.el9eap |
eap8-yassonRed Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 14 CVEs |
before 0:3.0.4-5.redhat_00007.1.el9eap | 0:3.0.4-5.redhat_00007.1.el9eap |
eap7-wildflyRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 11 CVEs |
before 0:7.3.18-3.GA_redhat_00001.1.el7eap | 0:7.3.18-3.GA_redhat_00001.1.el7eap |
eap7-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 11 CVEs |
before 0:7.3.18-3.GA_redhat_00001.1.el7eap | 0:7.3.18-3.GA_redhat_00001.1.el7eap |
eap7-wildfly-java-jdk8Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 11 CVEs |
before 0:7.3.18-3.GA_redhat_00001.1.el7eap | 0:7.3.18-3.GA_redhat_00001.1.el7eap |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 11 CVEs |
before 0:7.3.18-3.GA_redhat_00001.1.el7eap | 0:7.3.18-3.GA_redhat_00001.1.el7eap |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 11 CVEs |
before 0:7.3.18-3.GA_redhat_00001.1.el7eap | 0:7.3.18-3.GA_redhat_00001.1.el7eap |
eap7-undertowRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 11 CVEs |
before 0:2.0.41-8.SP9_redhat_00001.1.el7eap | 0:2.0.41-8.SP9_redhat_00001.1.el7eap |
eap7-apache-cxfRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 11 CVEs |
before 0:3.4.10-4.SP2_redhat_00004.1.el7eap | 0:3.4.10-4.SP2_redhat_00004.1.el7eap |
eap7-apache-cxf-rtRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 11 CVEs |
before 0:3.4.10-4.SP2_redhat_00004.1.el7eap | 0:3.4.10-4.SP2_redhat_00004.1.el7eap |
eap7-apache-cxf-servicesRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 11 CVEs |
before 0:3.4.10-4.SP2_redhat_00004.1.el7eap | 0:3.4.10-4.SP2_redhat_00004.1.el7eap |
eap7-apache-cxf-toolsRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 11 CVEs |
before 0:3.4.10-4.SP2_redhat_00004.1.el7eap | 0:3.4.10-4.SP2_redhat_00004.1.el7eap |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | EUVD, NVD, OSV | |
| facts | CVE List | |
| affected | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-23368 is a high vulnerability (CVSS 8.1) in Red Hat Build Of Keycloak, published March 4, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.89%, the 59th percentile. Fixed in org.wildfly.core:wildfly-elytron-integration 32.0.0.Beta3.
References
access.redhat.com/errata/RHSA-2026:18054
bugzilla.redhat.com/show_bug.cgi?id=2337621
Show 187 moreShow less
gruppotim.it/it/footer/red-team.html
nvd.nist.gov/vuln/detail/CVE-2025-23368
github.com/advisories/GHSA-3jxr-23ph-c89g
docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1
issues.redhat.com/browse/JBEAP-29032
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_18054.json
cve.org/CVERecord?id=CVE-2025-14813
gist.github.com/weaver4VD/3216dac645220f8c9b488362f61241ec
lists.apache.org/thread/jwpsdc8tdxotm98od8n8n30fqlzoc8gg
mogwailabs.de/en/blog/2025/02/c3p0-you-little-rascal
mchange.com/projects/c3p0
w4ke.info/2025/06/18/funky-chunks.html
rfc-editor.org/rfc/rfc9110
bitbucket.org/b_c/jose4j/issues/220/vuln-zip-bomb-attack
kb.cert.org/vuls/id/767506
This page doesn't list everything
Left out here: 243 versions. The JSON record has them.