Approved changes feed: RSS · Atom

cpe:2.3:a:imperva:securesphere:13.2.10:*:*:*:*:*:*:*

part: a version: 13.2.10 update: *

VendorImperva (78f8bc09-6a17-5b54-b43a-e0fd139ca77e)
ProductSecuresphere (b6bc168b-5921-5a96-9620-b754427cfb3f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-5403 vulnerable 2026-06-08 05:11:50.865425 Details available
Imperva SecureSphere gateway (GW) running v13, for both pre-First Time Login or post-First Time Login (FTL), if the attacker knows the basic authentication passwords, the GW may be vulnerable to RCE through specially crafted requests, from the web access management interface.
Published: 2019-01-10T22:00:00.000Z
Updated: 2024-08-05T05:33:44.444Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19646 vulnerable 2026-06-08 05:11:15.981390 Details available
The Python CGI scripts in PWS in Imperva SecureSphere 13.0.10, 13.1.10, and 13.2.10 allow remote attackers to execute arbitrary OS commands because command-line arguments are mishandled.
Published: 2018-11-28T17:00:00.000Z
Updated: 2024-09-17T02:42:18.949Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16660 vulnerable 2026-06-08 05:11:05.323337 Details available
A command injection vulnerability in PWS in Imperva SecureSphere 13.0.0.10 and 13.1.0.10 Gateway allows an attacker with authenticated access to execute arbitrary OS commands on a vulnerable installation.
Published: 2019-04-25T19:40:40.000Z
Updated: 2024-08-05T10:32:53.521Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.