CVE-2011-5266: Improper Neutralization of Special Elements used in an SQL Command

Imperva SecureSphere Web Application Firewall WAF before 12-august-2010 allows SQL injection filter bypass...

PT-2020-7159

Name of the Vulnerable Software and Affected Versions Imperva SecureSphere Web Application Firewall WAF versions prior to 12-august-2010 Description The issue allows SQL injection filter bypass. Recommendations For versions prior to 12-august-2010, update to a version released after 12-august-201...

PT-2014-2180

Name of the Vulnerable Software and Affected Versions Imperva SecureSphere Web Application Firewall WAF version 9.0 Description A cross-site scripting XSS issue exists in the Violations Table of the management GUI in the MX Management Server, allowing remote attackers to inject arbitrary web scri...

CVE-2011-4887: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Violations Table in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall WAF 9.0 allows remote attackers to inject arbitrary web script or HTML via the username field...

PT-2011-2618

Name of the Vulnerable Software and Affected Versions Imperva SecureSphere Web Application Firewall versions 6.2, 7.x, and 8.x Description A cross-site scripting XSS issue exists in the management GUI of the MX Management Server, allowing remote attackers to inject arbitrary web script or HTML vi...

CVE-2011-0767: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall 6.2, 7.x, and 8.x allows remote attackers to inject arbitrary web script or HTML via an HTTP request to a firewalled server, aka Bug ID 31759...

CVE-2010-1329: Undefined Security Weakness

Imperva SecureSphere Web Application Firewall and Database Firewall 5.0.0.5082 through 7.0.0.7078 allow remote attackers to bypass intrusion-prevention functionality via a request that has an appended long string containing an unspecified manipulation...