CWE-645

9 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

Critical 0High 2Medium 6Low 1Not scored 0

CVEs per yearBy the year they were published

CVE-2023-4346
KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users being unable…
KNX Association · KNX Protocol Connection Authorization Option 1
ExploitedHigh7.5

CVE-2026-35161
Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Overly Restrictive Account Lockout Mechanism vulnerability. An unauthenticated attacker…
Dell · PowerScale InsightIQ
Medium5.3
CVE-2026-105866
Payload: Unauthenticated account-lockout denial of service
payloadcms · payload
Medium6.9
CVE-2026-53982
Cap-go Console < 12.28.2 Account Deletion DoS via Device Identifier Association
Cap-go · capgo
High7.1
CVE-2026-25907
Dell PowerScale OneFS, version 9.13.0.0, contains an overly restrictive account lockout mechanism vulnerability. An unauthenticated attacker with remote access…
Dell · PowerScale OneFS
Medium5.3
CVE-2025-5241
Denial-of-Service Vulnerability in MELSEC iQ-F Series
Mitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/ES
Medium5.3
CVE-2025-31947
Repeated LDAP login failures can lock an LDAP account
Mattermost · Mattermost
Medium5.8
CVE-2024-37028
BIG-IP Next Central Manager vulnerability
F5 · BIG-IP Next Central Manager
Medium6.3
CVE-2024-1722
Keycloak-core: dos via account lockout
keycloak-core
Low3.7
CVE-2023-4346
KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users being unable…
KNX Association · KNX Protocol Connection Authorization Option 1
ExploitedHigh7.5