CWE-410: Insufficient Resource Pool

The product's resource pool is not large enough to handle peak demand.

What the weakness is: CWE-410 at MITRE. All weaknesses

1. 3.7CVE-2026-114472EPSS 0.2%2026-10-21

   Insufficient resource pool in the ACME HTTP-01 challenge responder of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to cause a certificate issuance or renewal to fail. When the server obtains or…

2. 5.3CVE-2026-58218EPSS 0.8%2026-07-30

   A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large numbe…

3. 6.3CVE-2026-34019EPSS 0.3%2026-05-13

   When Bidirectional Forwarding Detection (BFD) is configured in Static and Dynamic routing protocols, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to stop processing BFD packets and cause the configured routing pro…

4. 3.5CVE-2025-2134EPSS 0.2%2026-02-04

   IBM Jazz Reporting Service could allow an authenticated user on the network to affect the system's performance using complicated queries due to insufficient resource pooling.

5. 6.0CVE-2025-12986EPSS 0.2%2025-12-04

   When a WF200/WGM160P device is configured to operate as an Access Point, it may be vulnerable to a denial of service triggered by a malformed packet. The device may recover automatically or require a hard reset.

6. 7.5CVE-2025-41653EPSS 0.6%2025-05-27

   An unauthenticated remote attacker can exploit a denial-of-service vulnerability in the device's web server functionality by sending a specially crafted HTTP request with a malicious header, potentially causing the server to crash or becom…

7. 5.7CVE-2025-20103EPSS 0.2%2025-05-13

   Insufficient resource pool in the core management mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access.

8. 7.5CVE-2025-27479EPSS 2.3%2025-04-08

   Insufficient resource pool in Windows Kerberos allows an unauthorized attacker to deny service over a network.

9. 7.5CVE-2025-27694EPSS 0.4%2025-04-02

   Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Insufficient Resource Pool vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

10. 7.5CVE-2025-0453EPSS 11%2025-03-20

    In mlflow/mlflow version 2.17.2, the `/graphql` endpoint is vulnerable to a denial of service attack. An attacker can create large batches of queries that repeatedly request all runs from a given experiment. This can tie up all the workers…

11. 6.5CVE-2024-7392EPSS 0.6%2024-11-22

    ChargePoint Home Flex Bluetooth Low Energy Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of ChargePoint Home Flex charging devices. A…

12. 5.3CVE-2023-7033EPSS 0.8%2024-02-27

    Insufficient Resource Pool vulnerability in Ethernet function of Mitsubishi Electric Corporation MELSEC iQ-R series CPU module, MELSEC iQ-L series CPU module, MELSEC iQ-R Ethernet Interface Module, MELSEC iQ-R CC-Link IE TSN Master/Local M…

13. 7.5CVE-2023-38505EPSS 0.8%2023-07-27

    DietPi-Dashboard is a web dashboard for the operating system DietPi. The dashboard only allows for one TLS handshake to be in process at a given moment. Once a TCP connection is established in HTTPS mode, it will assume that it should be w…

14. 7.5CVE-2022-40224EPSS 65%2023-02-07

    A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP message header can lead to denial of service. An attacker can send an HTTP request to…

15. 7.5CVE-2022-46679EPSS 0.8%2023-02-01

    Dell PowerScale OneFS 8.2.x, 9.0.0.x - 9.4.0.x, contain an insufficient resource pool vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to denial of service.

16. 5.3CVE-2022-20937EPSS 1.0%2022-11-04

    A vulnerability in a feature that monitors RADIUS requests on Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker to negatively affect the performance of an affected device. This vulnerability i…

17. 7.5CVE-2022-2048EPSS 2.6%2022-07-07

    In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial o…

18. 6.5CVE-2022-22191EPSS 0.4%2022-04-14

    A Denial of Service (DoS) vulnerability in the processing of a flood of specific ARP traffic in Juniper Networks Junos OS on the EX4300 switch, sent from the local broadcast domain, may allow an unauthenticated network-adjacent attacker to…

19. 8.6CVE-2021-1615EPSS 1.3%2021-09-23

    A vulnerability in the packet processing functionality of Cisco Embedded Wireless Controller (EWC) Software for Catalyst Access Points (APs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an…

20. 7.5CVE-2019-13921EPSS 1.4%2019-10-10

    A vulnerability has been identified in SIMATIC WinAC RTX (F) 2010 (All versions < SP3 Update 1). Affected versions of the software contain a vulnerability that could allow an unauthenticated attacker to trigger a denial-of-service conditio…

21. 7.5CVE-2019-0056EPSS 1.3%2019-10-09

    This issue only affects devices with three (3) or more MPC10's installed in a single chassis with OSPF enabled and configured on the device. An Insufficient Resource Pool weakness allows an attacker to cause the device's Open Shortest Path…

22. 7.5CVE-2018-13815EPSS 1.8%2018-12-13

    A vulnerability has been identified in SIMATIC S7-1200 (All versions), SIMATIC S7-1500 (All Versions < V2.6). An attacker could exhaust the available connection pool of an affected device by opening a sufficient number of connections to th…