Skip to main content

Vendors Questionnaires Investors News

0-Doubt — neutral IT/Security research

Browse Products Market reports Resellers Certified analysts Investors RFI/RFP questionnaires How trust works Nothing here is ranked by payment Help & FAQ API Privacy Terms Cookies

API Security by Imperva | 0-Doubt

Home
Vendors
Imperva
API Security

Home
Vendors
API Security
API Security

API Security

API securityAI-generated from public sourcesThe starting point for every profile: auto-generated by 0-Doubt from public vendor materials, and not yet confirmed by the vendor or an independent analyst. Nothing here is hidden or overstated — it simply has not been reviewed yet.Where every profile starts, before the vendor or an analyst has reviewed it. A higher label means a more independent source — not a better product.How trust works →Secure coding rating: 0/100How this score is computedA product with no known CVEs starts at a neutral score and climbs the longer it goes without one; a product with known CVEs is penalized by severity instead. This one has 18 known CVEs (vendor-level match — see the CVE list below) and is tracked as ~115 days old in our catalog (a stand-in for real release date, which we don't track). The platform admin controls the formula's weights.

Discover, detect, and mitigate API threats in one console.

by Imperva · imperva.com · source ↗

Screenshots

1

API Security — screenshot

Known CVEs (18)

CVE-2023-50969 ↗CRITICAL 9.82024
Thales Imperva SecureSphere WAF 14.7.0.40 allows remote attackers to bypass WAF rules via a crafted POST request, a different vulnerability than CVE-2021-45468.
CVE-2023-40180 ↗HIGH 7.52023
silverstripe-graphql is a package which serves Silverstripe data in GraphQL representations. An attacker could use a recursive graphql query to execute a Distributed Denial of Service attack (DDOS at…
CVE-2021-45468 ↗

Materials

0

No datasheets, whitepapers, case studies, videos, or demos linked yet.

Other API Security products

42Crunch API Scan · 42Crunch
42Crunch API Security Platform · 42Crunch
42Crunch API Security Testing · 42Crunch
42Crunch Secure MCP Server · 42Crunch
API Security · Fastly
APIsec API Security · APIsec
Acunetix API Security Testing · Acunetix
Akamai API Security · Akamai

CRITICAL 9.8

2022

Imperva Web Application Firewall (WAF) before 2021-12-23 allows remote unauthenticated attackers to use "Content-Encoding: gzip" to evade WAF security controls and send malicious HTTP POST requests to…

…and 15 more · see all on the vendor page →