Skip to content
Noroxi

Imperva records

17 published records for vendor imperva.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 5.9%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 20
  4. 22
  5. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

17 records
  • CVE-2018-16660
    40Plan

    A command injection vulnerability in PWS in Imperva SecureSphere 13.0.0.10 and 13.1.0.10 Gateway allows an attacker with authenticated acces

    HighCVSS 8.8WeaponizedEPSS 17%

    imperva · securesphereApr 25, 2019

  • CVE-2021-45468
    40Plan

    Imperva Web Application Firewall (WAF) before 2021-12-23 allows remote unauthenticated attackers to use "Content-Encoding: gzip" to evade WA

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    imperva · web application firewallJan 14, 2022

  • CVE-2018-19646
    40Plan

    The Python CGI scripts in PWS in Imperva SecureSphere 13.0.10, 13.1.10, and 13.2.10 allow remote attackers to execute arbitrary OS commands

    CriticalCVSS 9.8No exploitEPSS 3%

    imperva · securesphereNov 28, 2018

  • CVE-2011-5266
    39Monitor

    Imperva SecureSphere Web Application Firewall (WAF) before 12-august-2010 allows SQL injection filter bypass.

    CriticalCVSS 9.8No exploitEPSS 1%

    imperva · securesphere web application firewallJan 8, 2020

  • CVE-2023-50969
    39Monitor

    Thales Imperva SecureSphere WAF 14.7.0.40 allows remote attackers to bypass WAF rules via a crafted POST request, a different vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    Mar 28, 2024

  • CVE-2018-5413
    35Monitor

    Imperva SecureSphere running v13.0, v12.0, or v11.5 allows low privileged users to add SSH login keys to the admin user, resulting in privil

    HighCVSS 8.8No exploitEPSS 1%

    imperva · securesphereJan 10, 2019

  • CVE-2018-5403
    33Monitor

    Imperva SecureSphere gateway (GW) running v13, for both pre-First Time Login or post-First Time Login (FTL), if the attacker knows the basic

    HighCVSS 8.1No exploitEPSS 2%

    imperva · securesphereJan 10, 2019

  • CVE-2013-4091
    32Monitor

    The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 does not have an off autocomplete attribute for

    HighCVSS 7.5Proof of conceptEPSS 5%

    imperva · securesphereJun 28, 2013

  • CVE-2010-1329
    31Monitor

    Imperva SecureSphere Web Application Firewall and Database Firewall 5.0.0.5082 through 7.0.0.7078 allow remote attackers to bypass intrusion

    HighCVSS 7.8No exploitEPSS 1%

    imperva · securesphere web application firewallApr 15, 2010

  • CVE-2018-5412
    31Monitor

    Imperva SecureSphere running v12.0.0.50 is vulnerable to local arbitrary code execution, escaping sealed-mode.

    HighCVSS 7.8No exploitEPSS 0%

    imperva · securesphereJan 10, 2019

  • CVE-2013-4095
    28Monitor

    plain/actionsets.html in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote authentic

    MediumCVSS 6.5Proof of conceptEPSS 5%

    imperva · securesphereJun 28, 2013

  • CVE-2013-4094
    28Monitor

    The Key Management feature in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote auth

    MediumCVSS 6.5Proof of conceptEPSS 5%

    imperva · securesphereJun 28, 2013

  • CVE-2013-4093
    22Monitor

    The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote attackers to obtain sensitive info

    MediumCVSS 5.0Proof of conceptEPSS 6%

    imperva · securesphereJun 28, 2013

  • CVE-2013-4092
    21Monitor

    The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows context-dependent attackers to obtain sen

    MediumCVSS 5.0Proof of conceptEPSS 4%

    imperva · securesphereJun 28, 2013

  • CVE-2008-1463
    17Monitor

    Cross-site scripting (XSS) vulnerability in the management GUI in Imperva SecureSphere MX Management Server 5.0 allows remote attackers to i

    MediumCVSS 4.3Proof of conceptEPSS 1%

    imperva · securesphereMar 24, 2008

  • CVE-2011-4887
    17Monitor

    Cross-site scripting (XSS) vulnerability in the Violations Table in the management GUI in the MX Management Server in Imperva SecureSphere W

    MediumCVSS 4.3No exploitEPSS 1%

    imperva · securesphere web application firewallSep 11, 2014

  • CVE-2011-0767
    17Monitor

    Cross-site scripting (XSS) vulnerability in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall

    MediumCVSS 4.3No exploitEPSS 1%

    imperva · securesphere web application firewallJun 6, 2011