CWE-799 交互频率的控制不恰当 类弱点 44 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-799 指产品未适当限制与交互方（如用户或自动化脚本）的交互频率或次数。攻击者常通过高频发送请求或重复执行操作，利用此缺陷耗尽系统资源导致拒绝服务，或绕过业务逻辑限制。开发者应实施速率限制、请求计数及令牌桶算法，确保交互频率在预期范围内，从而有效防御此类滥用行为。
char username[USERNAME_SIZE]; char password[PASSWORD_SIZE]; while (isValidUser == 0) { if (getNextMessage(socket, username, USERNAME_SIZE) > 0) { if (getNextMessage(socket, password, PASSWORD_SIZE) > 0) { isValidUser = AuthenticateUser(username, password); } } } return(SUCCESS);int count = 0; while ((isValidUser == 0) && (count < MAX_ATTEMPTS)) { if (getNextMessage(socket, username, USERNAME_SIZE) > 0) { if (getNextMessage(socket, password, PASSWORD_SIZE) > 0) { isValidUser = AuthenticateUser(username, password); } } count++; } if (isValidUser) { return(SUCCESS); } else { return(FAIL); }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-7402 | MeWare PDKS 安全漏洞 — PDKS | 8.1 | High | 2026-04-30 |
| CVE-2026-41346 | OpenClaw 安全漏洞 — OpenClaw | 5.3 | Medium | 2026-04-23 |
| CVE-2026-41343 | OpenClaw 安全漏洞 — OpenClaw | 5.3 | Medium | 2026-04-23 |
| CVE-2026-41333 | OpenClaw 安全漏洞 — OpenClaw | 3.7 | Low | 2026-04-23 |
| CVE-2025-55268 | HCL Aftermarket DPC 安全漏洞 — Aftermarket DPC | 4.3 | Medium | 2026-03-26 |
| CVE-2025-13212 | IBM Aspera Console 安全漏洞 — Aspera Console | 5.3 | Medium | 2026-03-13 |
| CVE-2026-22216 | WordPress plugin wpDiscuz 安全漏洞 — wpDiscuz | 6.5 | Medium | 2026-03-13 |
| CVE-2026-30972 | Parse Server 安全漏洞 — parse-server | 5.3AI | MediumAI | 2026-03-10 |
| CVE-2026-24017 | Fortinet FortiWeb 安全漏洞 — FortiWeb | 7.3 | High | 2026-03-10 |
| CVE-2025-13211 | IBM Aspera Orchestrator 安全漏洞 — Aspera Orchestrator | 5.3 | Medium | 2025-12-11 |
| CVE-2025-57816 | Fides 安全漏洞 — fides | 7.5AI | HighAI | 2025-09-08 |
| CVE-2024-47065 | Meshtastic 安全漏洞 — firmware | 5.3AI | MediumAI | 2025-07-11 |
| CVE-2025-52880 | Komga 安全漏洞 — komga | 4.2 | Medium | 2025-06-24 |
| CVE-2025-52570 | letmein 安全漏洞 — letmein | 6.5AI | MediumAI | 2025-06-24 |
| CVE-2025-48016 | Schweitzer Engineering Laboratories SEL Series 安全漏洞 — SEL-5056 Software-Defined Network Flow Controller | 4.3 | Medium | 2025-05-20 |
| CVE-2025-32378 | Shopware 安全漏洞 — shopware | 6.5AI | MediumAI | 2025-04-09 |
| CVE-2025-29998 | Rising Technosoft CAP back office application 安全漏洞 — CAP back office application | 8.1 | - | 2025-03-13 |
| CVE-2025-26524 | Rupeeseed RupeeWeb 安全漏洞 — RupeeWeb | 8.1 | - | 2025-02-14 |
| CVE-2024-13274 | Drupal 安全漏洞 — Open Social | 9.8 | - | 2025-01-09 |
| CVE-2024-51557 | Brokerage Wave 安全漏洞 — Wave 2.0 | 8.1AI | HighAI | 2024-11-04 |
| CVE-2024-47654 | Shilpi Client Dashboard 安全漏洞 — Client Dashboard | 9.1 | - | 2024-10-04 |
| CVE-2024-9199 | Clibo Manager 安全漏洞 — Clibo Manager | 5.8 | Medium | 2024-09-26 |
| CVE-2024-45788 | Reedos aiM-Star 安全漏洞 — Mutual Fund Distribution Product (aiM-Star) | 8.1AI | HighAI | 2024-09-11 |
| CVE-2024-32943 | Westermo L210-F2G Lynx 安全漏洞 — L210-F2G Lynx | 7.5 | High | 2024-06-20 |
| CVE-2024-35246 | Westermo L210-F2G Lynx 安全漏洞 — L210-F2G Lynx | 7.5 | High | 2024-06-20 |
| CVE-2024-0094 | NVIDIA vGPU Software 安全漏洞 — vGPU software and Cloud Gaming | 5.5 | Medium | 2024-06-13 |
| CVE-2023-51544 | WordPress plugin RegistrationMagic 安全漏洞 — RegistrationMagic | 5.3 | Medium | 2024-06-04 |
| CVE-2023-40673 | WordPress plugin Cartpauj Register Captcha 安全漏洞 — Cartpauj Register Captcha | 6.5 | Medium | 2024-06-04 |
| CVE-2023-40332 | WordPress plugin WP-PostRatings 安全漏洞 — WP-PostRatings | 5.3 | Medium | 2024-06-04 |
| CVE-2024-24873 | WordPress plugin CP Polls 安全漏洞 — CP Polls | 5.3 | Medium | 2024-05-17 |
CWE-799（交互频率的控制不恰当） 是常见的弱点类别，本平台收录该类弱点关联的 44 条 CVE 漏洞。