Imperva's vulnerability profile concentrates on a focused set of web application and database security appliances, including its SecureSphere platform and WAF offerings, which sit inline in enterprise request flows and handle sensitive application traffic. Vulnerabilities affecting the vendor skew toward serious outcomes with an elevated share reaching critical severity and a notable tendency to acquire public exploit code; the exposure recurs through input-handling weaknesses including cross-site scripting, command injection, OS command injection, and improper input validation that are characteristic of gateway and inspection appliances. Defenders should prioritize patching for internet-facing instances of these products and monitor for weaponized exploits targeting the appliance layer; current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Imperva over time
Signals from CVEs in this vendor scope (16 CVEs).
16 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-16660HIGH A command injection vulnerability in PWS in Imperva SecureSphere 13.0.0.10 and 13.1.0.10 Gateway allows an attacker with authenticated access to execute arbitrary OS commands on a | Apr 25, 2019 | 8.8 | 48 | NO | YES |
CVE-2021-45468CRITICAL Imperva Web Application Firewall (WAF) before 2021-12-23 allows remote unauthenticated attackers to use "Content-Encoding: gzip" to evade WAF security controls and send malicious H | Jan 14, 2022 | 9.8 | 32 | NO | NO |
CVE-2011-5266CRITICAL Imperva SecureSphere Web Application Firewall (WAF) before 12-august-2010 allows SQL injection filter bypass. | Jan 8, 2020 | 9.8 | 31 | NO | NO |
CVE-2018-19646CRITICAL The Python CGI scripts in PWS in Imperva SecureSphere 13.0.10, 13.1.10, and 13.2.10 allow remote attackers to execute arbitrary OS commands because command-line arguments are misha | Nov 28, 2018 | 9.8 | 31 | NO | NO |
CVE-2013-4091HIGH The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 does not have an off autocomplete attribute for the password (aka j_password) field on t | Jun 28, 2013 | 7.5 | 30 | NO | YES |
CVE-2013-4095MEDIUM plain/actionsets.html in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote authenticated users to execute arbitrary commands | Jun 28, 2013 | 6.5 | 28 | NO | YES |
CVE-2013-4094MEDIUM The Key Management feature in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote authenticated users to upload executable fil | Jun 28, 2013 | 6.5 | 28 | NO | YES |
CVE-2013-4093MEDIUM The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote attackers to obtain sensitive information via (1) a direct request to dwr/ | Jun 28, 2013 | 5.0 | 28 | NO | YES |
CVE-2018-5413HIGH Imperva SecureSphere running v13.0, v12.0, or v11.5 allows low privileged users to add SSH login keys to the admin user, resulting in privilege escalation. | Jan 10, 2019 | 8.8 | 27 | NO | NO |
CVE-2013-4092MEDIUM The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows context-dependent attackers to obtain sensitive information by leveraging the pre | Jun 28, 2013 | 5.0 | 27 | NO | YES |
Signals from CVEs in this vendor scope (16 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Imperva.
Media articles that mention a CVE ID that affects a product developed by Imperva — matched by CVE ID, not by vendor name.