org.wildfly.core:wildfly-core-dist-legacy (13.0.0.final), org.wildfly.core:wildfly-core-feature-pack (13.0.0.final) +3 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (13.0.0.final)

org.wildfly.core:wildfly-elytron-integration MAVEN version 13.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-dist-legacy 13.0.0.final -...

org.wildfly.core:wildfly-core-dist (3.0.0.beta23), org.wildfly.core:wildfly-core-feature-pack (3.0.0.beta23) +1 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (3.0.0.beta23)

org.wildfly.core:wildfly-elytron-integration MAVEN version 3.0.0.beta23 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-dist 3.0.0.beta23 -...

org.wildfly.core:wildfly-core-dist (4.0.0.alpha9), org.wildfly.core:wildfly-core-feature-pack (4.0.0.alpha9) +1 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (4.0.0.alpha9)

org.wildfly.core:wildfly-elytron-integration MAVEN version 4.0.0.alpha9 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-elytron-integration and may be impacted: - org.wildfly.core:wildfly-core-dist 4.0.0.alpha9 -...

Brute-force Attack

org.wildfly.core, wildfly-elytron-integration is vulnerable to Brute-force Attack. The vulnerability is due to the lack of rate limiting on failed authentication attempts via CLI, allows attackers to perform multiple failed authentication attempts within a short time frame due to the lack of rate...

com.antonyudin.wildfly.security:ay-securityrealm-ejb (1.0), org.jboss.as:hal-testsuite-basic (0.0.6) +18 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (>=3.0.0.beta17, <=34.0.0.beta7)

org.wildfly.core:wildfly-elytron-integration MAVEN version =3.0.0.beta17, =5.0.0.alpha6, =3.0.0.beta17, =5.0.0.alpha6, =3.0.0.beta17, =13.0.0.beta1, =5.0.0.alpha6, =3.0.0.beta22, =40.0.0.beta1, =28.0.0.beta1, =29.0.0.alpha1, =28.0.0.beta1, =28.0.0.beta1, =41.0.0.final and more Source cves:...

com.antonyudin.wildfly.security:ay-securityrealm-ejb (1.0), org.jboss.as:hal-testsuite-basic (0.0.6) +17 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (>=3.0.0.beta17, <=31.0.2.final)

org.wildfly.core:wildfly-elytron-integration MAVEN version =3.0.0.beta17, =5.0.0.alpha6, =3.0.0.beta17, =5.0.0.alpha6, =3.0.0.beta17, =13.0.0.beta1, =5.0.0.alpha6, =3.0.0.beta22, =28.0.0.beta1, =29.0.0.alpha1, =28.0.0.beta1, =28.0.0.beta1, =25.0.0.final, =27.0.0.alpha3 and more Source cves:...

org.wildfly.core:wildfly-core-feature-pack-common (>=32.0.0.beta1, <=32.0.0.beta2), org.wildfly.core:wildfly-core-galleon-pack (>=32.0.0.beta1, <=32.0.0.beta2) +1 more potentially affected by CVE-2025-23368 via org.wildfly.core:wildfly-elytron-integration (>=32.0.0.beta1, <=32.0.0.beta2)

org.wildfly.core:wildfly-elytron-integration MAVEN version =32.0.0.beta1, =32.0.0.beta1, =32.0.0.beta1, =32.0.0.beta1, =32.0.0.beta2 Source cves: CVE-2025-23368 Source advisory: MEND:CVE-2025-23368...

com.melloware:wildfly-myfaces-galleon-pack (9.27.0.final), org.keycloak:keycloak-saml-wildfly-jakarta-subsystem (22.0.0) +114 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (19.0.1.final)

org.wildfly.core:wildfly-server MAVEN version 19.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - com.melloware:wildfly-myfaces-galleon-pack 9.27.0.final -...

org.wildfly.core:wildfly-core-feature-pack-common (19.0.0.beta12), org.wildfly.core:wildfly-core-galleon-pack (19.0.0.beta12) +19 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (19.0.0.beta12)

org.wildfly.core:wildfly-server MAVEN version 19.0.0.beta12 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common 19.0.0.beta12 -...

org.wildfly.core:wildfly-core-feature-pack-common (>=17.0.0.final, <=17.0.3.final), org.wildfly.core:wildfly-core-galleon-pack (>=17.0.0.final, <=17.0.3.final) +72 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.17.1.final)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.17.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - org.wildfly.core:wildfly-core-feature-pack-common...

org.wildfly.core:wildfly-elytron-integration (19.0.0.beta18), org.wildfly.core:wildfly-elytron-integration-legacy-namespace (>=19.0.0.final, <=20.0.0.beta2) +7 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.20.2.final)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.20.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - org.wildfly.core:wildfly-elytron-integration 19.0.0.beta...

io.quarkus:quarkus-elytron-security-oauth2 (>=2.4.0.cr1, <=2.5.4.final), io.quarkus:quarkus-elytron-security-oauth2-deployment (>=2.4.0.cr1, <=2.5.4.final) +15 more potentially affected by CVE-2024-1233 via org.wildfly.security:wildfly-elytron-realm-token (1.17.2.final)

org.wildfly.security:wildfly-elytron-realm-token MAVEN version 1.17.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.security:wildfly-elytron-realm-token and may be impacted: - io.quarkus:quarkus-elytron-security-oauth2 =2.4.0.cr1,...