CVE-2008-1463

no score yetEPSS 1.6%

Cross-site scripting (XSS) vulnerability in the management GUI in Imperva SecureSphere MX Management Server 5.0 allows remote attackers to inject arbitrary web script or HTML via an invalid or prohibited request to a web server protected by SecureSphere, which triggers injection into the "corrective action" section of an alert page.

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2008-03-24
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

imperva:securesphere
imperva:securesphere_mx_management_server

References

http://imperva.com/go/secadv/20080318
http://secunia.com/advisories/29439
http://www.securityfocus.com/bid/28279
https://exchange.xforce.ibmcloud.com/vulnerabilities/41359
http://imperva.com/go/secadv/20080318

Check your stack JSON