Imperva Securesphere Web Application Firewall — known CVE vulnerabilities

Every CVE whose affected-product data names Imperva Securesphere Web Application Firewall, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2011-5266 — CVSS 9.8 (critical): Imperva SecureSphere Web Application Firewall (WAF) before 12-august-2010 allows SQL injection filter bypass.
• CVE-2010-1329 — CVSS 7.8 (high): Imperva SecureSphere Web Application Firewall and Database Firewall 5.0.0.5082 through 7.0.0.7078 allow remote attackers to bypass…
• CVE-2011-0767 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall…
• CVE-2011-4887 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in the Violations Table in the management GUI in the MX Management Server in Imperva SecureSphere…