Browse CVEs

CRITICAL 9.8 CVE-2021-45468 Imperva Web Application Firewall (WAF) before 2021-12-23 allows remote unauthenticated attackers to use "Content-Encoding: gzip" to evade WAF securit… Web Application Firewall 2021-12-23+ Fix from $2,3002022-01-14 CRITICAL 9.8 CVE-2011-5266 Imperva SecureSphere Web Application Firewall (WAF) before 12-august-2010 allows SQL injection filter bypass. Securesphere Web Application Firewall 2010-08-12+ Fix from $2,3002020-01-08 HIGH 8.8 CVE-2018-16660EPSS 17% A command injection vulnerability in PWS in Imperva SecureSphere 13.0.0.10 and 13.1.0.10 Gateway allows an attacker with authenticated access to exec… Securesphere No fix yet Fix from $1,9502019-04-25 HIGH 8.8 CVE-2018-5413 Imperva SecureSphere running v13.0, v12.0, or v11.5 allows low privileged users to add SSH login keys to the admin user, resulting in privilege escal… Securesphere No fix yet Fix from $1,9502019-01-10 HIGH 8.1 CVE-2018-5403 Imperva SecureSphere gateway (GW) running v13, for both pre-First Time Login or post-First Time Login (FTL), if the attacker knows the basic authenti… Securesphere No fix yet Fix from $1,9502019-01-10 HIGH 7.8 CVE-2018-5412 Imperva SecureSphere running v12.0.0.50 is vulnerable to local arbitrary code execution, escaping sealed-mode. Securesphere No fix yet Fix from $1,9502019-01-10 CRITICAL 9.8 CVE-2018-19646 The Python CGI scripts in PWS in Imperva SecureSphere 13.0.10, 13.1.10, and 13.2.10 allow remote attackers to execute arbitrary OS commands because c… Securesphere No fix yet Fix from $2,3002018-11-28 MEDIUM 6.5 CVE-2013-4095EPSS 6% plain/actionsets.html in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote authenticated user… Securesphere No fix yet Fix from $1,6002013-06-28 MEDIUM 6.5 CVE-2013-4094EPSS 6% The Key Management feature in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote authenticated… Securesphere No fix yet Fix from $1,6002013-06-28 MEDIUM 5.0 CVE-2013-4093EPSS 7% The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote attackers to obtain sensitive information v… Securesphere No fix yet Fix from $1,6002013-06-28 HIGH 7.5 CVE-2013-4091EPSS 6% The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 does not have an off autocomplete attribute for the passw… Securesphere No fix yet Fix from $1,9502013-06-28 MEDIUM 5.0 CVE-2013-4092 The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows context-dependent attackers to obtain sensitive in… Securesphere No fix yet Fix from $1,6002013-06-28 HIGH 7.8 CVE-2010-1329 Imperva SecureSphere Web Application Firewall and Database Firewall 5.0.0.5082 through 7.0.0.7078 allow remote attackers to bypass intrusion-preventi… Securesphere Web Application Firewall Patch available Fix from $1,9502010-04-15