Denyall Web Application Firewall — known CVE vulnerabilities

Every CVE whose affected-product data names Denyall Web Application Firewall, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2017-14706 — CVSS 9.8 (critical): DenyAll WAF before 6.4.1 allows unauthenticated remote attackers to obtain authentication information by making a typeOf=debug request to…
• CVE-2017-14705 — CVSS 8.1 (high): DenyAll WAF before 6.4.1 allows unauthenticated remote command execution via TCP port 3001 because shell metacharacters can be inserted…