False Positive with nextcloud artifacts

### Current Behavior

Hello,

Dependency track seems to detect CVE-2023-25160 (NVD) on javax.mail.mail, v1.4.7, but this CVE concerns nextcloud.
When I ask dependency track for CVE detail :
cpe:2.3:a:nextcloud:mail:*:*:*:*:*:*:*:* ( \|<1.11.8 ) | NVD
cpe:2.3:a:nextcloud:mail:*:*:*:*:*:*:*:* ( >=1.12.0\|<1.12.9 ) | NVD
cpe:2.3:a:nextcloud:mail:*:*:*:*:*:*:*:* ( >=1.13.0\|<1.14.5 ) | NVD
cpe:2.3:a:nextcloud:mail:*:*:*:*:*:*:*:* ( >=2.0.0\|<2.2.1 ) | NVD

Also I do not understand how this CVE can be detected on this artifact. The groupId is different and also the filter is supposed not to match... Note that I have the same issue on another artifact (com.toedter.jcalendar, CVE-2018-3763, which not a nextcloud artifact too...)

I supposed there is a problem with pattern matching...

### Steps to Reproduce

1. Run dependency-track on a project using the artifact javax.mail.mail

### Expected Behavior

CVE 2023-25160 (concerning nextcloud artifacts) not raised for this artifact.

### Dependency-Track Version

4.10.0

### Dependency-Track Distribution

Container Image

### Database Server

PostgreSQL

### Database Server Version

_No response_

### Browser

Google Chrome

### Checklist

- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported