Known Vulnerabilities for products from Imperva
Listed below are 16 of the newest known vulnerabilities associated with the vendor "Imperva".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-45468 json | Imperva Web Application Firewall (WAF) before 2021-12-23 allows remote unauthenticated attackers to use "Content-Encoding: gz... | 9.8 - CRITICAL | 2022-01-14 | 2022-01-21 |
| CVE-2018-19646 json | The Python CGI scripts in PWS in Imperva SecureSphere 13.0.10, 13.1.10, and 13.2.10 allow remote attackers to execute arbitra... | 9.8 - CRITICAL | 2018-11-28 | 2019-02-04 |
| CVE-2018-16660 json | A command injection vulnerability in PWS in Imperva SecureSphere 13.0.0.10 and 13.1.0.10 Gateway allows an attacker with auth... | 8.8 - HIGH | 2019-04-25 | 2019-04-29 |
| CVE-2018-5413 json | Imperva SecureSphere running v13.0, v12.0, or v11.5 allows low privileged users to add SSH login keys to the admin user, resu... | 8.8 - HIGH | 2019-01-10 | 2019-10-09 |
| CVE-2018-5412 json | Imperva SecureSphere running v12.0.0.50 is vulnerable to local arbitrary code execution, escaping sealed-mode. | 7.8 - HIGH | 2019-01-10 | 2019-10-09 |
| CVE-2018-5403 json | Imperva SecureSphere gateway (GW) running v13, for both pre-First Time Login or post-First Time Login (FTL), if the attacker ... | 8.1 - HIGH | 2019-01-10 | 2019-10-09 |
| CVE-2013-4095 json | plain/actionsets.html in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows r... | Not Provided | 2013-06-28 | 2026-04-29 |
| CVE-2013-4094 json | The Key Management feature in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 all... | Not Provided | 2013-06-28 | 2026-04-29 |
| CVE-2013-4093 json | The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote attackers to obtain... | Not Provided | 2013-06-28 | 2026-04-29 |
| CVE-2013-4092 json | The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows context-dependent attacker... | Not Provided | 2013-06-28 | 2026-04-29 |
| CVE-2013-4091 json | The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 does not have an off autocomplete... | Not Provided | 2013-06-28 | 2026-04-29 |
| CVE-2011-5266 json | Imperva SecureSphere Web Application Firewall (WAF) before 12-august-2010 allows SQL injection filter bypass. | 9.8 - CRITICAL | 2020-01-08 | 2020-01-15 |
| CVE-2011-4887 json | Cross-site scripting (XSS) vulnerability in the Violations Table in the management GUI in the MX Management Server in Imperva... | Not Provided | 2014-09-11 | 2026-05-06 |
| CVE-2011-0767 json | Cross-site scripting (XSS) vulnerability in the management GUI in the MX Management Server in Imperva SecureSphere Web Applic... | Not Provided | 2011-06-06 | 2026-04-29 |
| CVE-2010-1329 json | Imperva SecureSphere Web Application Firewall and Database Firewall 5.0.0.5082 through 7.0.0.7078 allow remote attackers to b... | Not Provided | 2010-04-15 | 2026-04-29 |
| CVE-2008-1463 json | Cross-site scripting (XSS) vulnerability in the management GUI in Imperva SecureSphere MX Management Server 5.0 allows remote... | Not Provided | 2008-03-24 | 2026-04-23 |
Known software with vulnerabilities from Imperva
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Imperva | Securesphere | 11.5 |
| Application | Imperva | Securesphere Web Application Firewall | 2010-08-12 |