CWE-645 — known CVE vulnerabilities

CVEs classified under CWE-645, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2023-4346 — CVSS 7.5 (high): KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and…
• CVE-2026-53982 — CVSS 6.5 (medium): Cap-go Console < 12.28.2 contains a denial-of-service vulnerability in its account deletion flow that allows an attacker to block…
• CVE-2025-31947 — CVSS 5.8 (medium): Mattermost versions 10.6.x <= 10.6.1, 10.5.x <= 10.5.2, 10.4.x <= 10.4.4, 9.11.x <= 9.11.11 fail to lockout LDAP users following repeated…
• CVE-2026-25907 — CVSS 5.3 (medium): Dell PowerScale OneFS, version 9.13.0.0, contains an overly restrictive account lockout mechanism vulnerability. An unauthenticated…
• CVE-2025-5241 — CVSS 5.3 (medium): Overly Restrictive Account Lockout Mechanism vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series allows a remote…
• CVE-2024-1722 — CVSS 3.7 (low): A flaw was found in Keycloak. In certain conditions, this issue may allow a remote unauthenticated attacker to block other accounts from…