CWE-645 is a common weakness enumeration in software security. This database tracks 4 CVE vulnerabilities classified under this weakness type.

How many CVEs are classified as CWE-645?

There are 4 CVE vulnerabilities classified as CWE-645 with an average CVSS score of 5.975.

What is the severity distribution for CWE-645?

CWE-645 contains 0 critical, 1 high, 3 medium, and 0 low severity vulnerabilities.

CWE-645

Total CVEs

Vulnerabilities

Avg CVSS v3

6.0

Medium

Latest CVE

2025

Most Recent

Severity Distribution

Critical 0

High 1

25%

Medium 3

75%

Low 0

External References

MITRE CWE

Official CWE definition

NIST NVD

Search CVEs by CWE

All CVEs (4)

Page 1 of 1

CVE-2023-4346

HIGH

CVSS:7.5(High)

KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users being unable to reset them to gain access to the devic...

CWE-6452023

CVE-2025-31947

MEDIUM

CVSS:5.8(Medium)

Mattermost versions 10.6.x <= 10.6.1, 10.5.x <= 10.5.2, 10.4.x <= 10.4.4, 9.11.x <= 9.11.11 fail to lockout LDAP users following repeated login failures, which allows attackers to lock external LDAP a...

CWE-6452025

CVE-2024-37028

MEDIUM

CVSS:5.3(Medium)

BIG-IP Next Central Manager may allow an attacker to lock out an account that has never been logged in. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CWE-6452024

CVE-2024-1722

MEDIUM

CVSS:5.3(Medium)

A flaw was found in Keycloak. In certain conditions, this issue may allow a remote unauthenticated attacker to block other accounts from logging in.

CWE-6452024