Critical severity9.8NVD Advisory· Published Jan 14, 2022· Updated Jun 17, 2026
CVE-2021-45468
CVE-2021-45468
Description
Imperva Web Application Firewall (WAF) before 2021-12-23 allows remote unauthenticated attackers to use "Content-Encoding: gzip" to evade WAF security controls and send malicious HTTP POST requests to web servers behind the WAF.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- Imperva/Web Application Firewall (WAF)description
- Range: <2021-12-23
- cpe:2.3:a:imperva:web_application_firewall:*:*:*:*:*:*:*:*Range: <2021-12-23
Patches
Vulnerability mechanics
References
1- bishopfox.com/blog/imperva-eliminates-critical-exposurenvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.