Read the docs

Imperva

Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

Imperva records in CISA KEV

No Imperva vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Web Application Firewall · all components

Priority MEDIUM 49

Imperva Web Application Firewall (WAF) before 2021-12-23 allows remote unauthenticated attackers to use "Content-Encoding: gzip" to evade WAF security controls and send malicious HTTP POST requests to web servers behind…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04219 Published 2022-01-14 No fix listed CWE-444
Open these records in search →