Critical severity9.8NVD Advisory· Published Jan 14, 2022· Updated Jun 17, 2026

CVE-2021-45468

Description

Imperva Web Application Firewall (WAF) before 2021-12-23 allows remote unauthenticated attackers to use "Content-Encoding: gzip" to evade WAF security controls and send malicious HTTP POST requests to web servers behind the WAF.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Imperva/Web Application Firewall (WAF)description
Imperva/WAFllm-create
Range: <2021-12-23
Imperva/Securesphere Web Application Firewallllm-fuzzy
Range: <2021-12-23

Patches

Vulnerability mechanics

References

bishopfox.com/blog/imperva-eliminates-critical-exposurenvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000