CWE-645

7 CVEs classified under CWE-645. Browse by severity and year.

Top CVEs for CWE-645
CVESeverityScorePublishedSummary
CVE-2023-4346High7.52023-08-29 KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users being unable…
CVE-2026-53982Medium6.52026-06-12Cap-go Console < 12.28.2 contains a denial-of-service vulnerability in its account deletion flow that allows an attacker to block authentication and onboarding…
CVE-2025-31947Medium5.82025-05-15Mattermost versions 10.6.x <= 10.6.1, 10.5.x <= 10.5.2, 10.4.x <= 10.4.4, 9.11.x <= 9.11.11 fail to lockout LDAP users following repeated login failures, which…
CVE-2026-25907Medium5.32026-03-04Dell PowerScale OneFS, version 9.13.0.0, contains an overly restrictive account lockout mechanism vulnerability. An unauthenticated attacker with remote access…
CVE-2025-5241Medium5.32025-07-11Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series allows a remote unauthenticated attacker to lo…
CVE-2024-37028Medium5.32024-08-14BIG-IP Next Central Manager may allow an attacker to lock out an account that has never been logged in.  Note: Software versions which have reached End of Tech…
CVE-2024-1722Low3.72024-02-29A flaw was found in Keycloak. In certain conditions, this issue may allow a remote unauthenticated attacker to block other accounts from logging in.
All CVEs classified under CWE-645 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-53982Medium6.52026-06-12Cap-go Console < 12.28.2 contains a denial-of-service vulnerability in its account deletion flow that allows an attacker to block authentication and onboarding…
CVE-2026-25907Medium5.32026-03-04Dell PowerScale OneFS, version 9.13.0.0, contains an overly restrictive account lockout mechanism vulnerability. An unauthenticated attacker with remote access…
CVE-2025-5241Medium5.32025-07-11Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series allows a remote unauthenticated attacker to lo…
CVE-2025-31947Medium5.82025-05-15Mattermost versions 10.6.x <= 10.6.1, 10.5.x <= 10.5.2, 10.4.x <= 10.4.4, 9.11.x <= 9.11.11 fail to lockout LDAP users following repeated login failures, which…
CVE-2024-37028Medium5.32024-08-14BIG-IP Next Central Manager may allow an attacker to lock out an account that has never been logged in.  Note: Software versions which have reached End of Tech…
CVE-2024-1722Low3.72024-02-29A flaw was found in Keycloak. In certain conditions, this issue may allow a remote unauthenticated attacker to block other accounts from logging in.
CVE-2023-4346High7.52023-08-29 KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users being unable…