What’s Vulnerable › Vulnerabilities

CVE-2023-50969

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-28 · updated 2026-06-17

Description

Thales Imperva SecureSphere WAF 14.7.0.40 allows remote attackers to bypass WAF rules via a crafted POST request, a different vulnerability than CVE-2021-45468.

Affected products

• Imperva Securesphere Web Application Firewall: 14.7.0.40

References

• https://docs.imperva.com/bundle/v14.7-waf-administration-guide/page/9282.htm
• https://www.hoyahaxa.com/2024/03/imperva-waf-bypass-cve-2023-50969.html
• https://docs.imperva.com/bundle/v14.7-waf-administration-guide/page/9282.htm
• https://www.hoyahaxa.com/2024/03/imperva-waf-bypass-cve-2023-50969.html

Get alerted when CVE-2023-50969 or the next vulnerability affects your stack