Bogus CPE strings without version limits in NVD analyzer create recurring false positives

### Current Behavior

With deptrack 4.8.2, a bad NVD dataset for CVE-2007-4465, CVE 2007-6423 and others cause any new version of the Apache httpd_server component in an SBOM to cause 10 or more new false positives every time.

This is probably caused by CPE based matching with no version specified in the CPE reported from NVD. See the screenshot. NVD reports a CPE of: "cpe:2.3:a:apache:http_server:-:*:*:*:*:*:*:*@-" which matches every version and cannot be avoided.


### Steps to Reproduce

1. Create an SBOM for a Component with CPE cpe:2.3:a:apache:http_server:2.4.57:*:*:*:*:*:*:*
2. Upload to DependencyTrack for Analysis with NVD data
3. Mark all false positives as false positives
4. Upload an SBOM for a Component with CPE cpe:2.3:a:apache:http_server:2.4.58:*:*:*:*:*:*:*
5. Upload and Analysis
6. See all the false positives reappear

### Expected Behavior

Either: False Positives due to wildcard version matches should not happen at all
Or: Wildcard based False Positives should stay suppressed when a new component version is uploaded

### Dependency-Track Version

4.8.x

### Dependency-Track Distribution

Container Image

### Database Server

PostgreSQL

### Database Server Version

_No response_

### Browser

Microsoft Edge

### Checklist

- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported