Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Blue_whale's avatar
Blue_whale
Icon for Cirrocumulus rankCirrocumulus
8 months ago

[ASM] : SQL-INJ "end-quote UNION" - How to allow this signature to specific url/uri/parameter only

Hi Team ,    can someone explain me the attack type - end-quote UNION and the solution to allow this signature to specific url/uri/parameter only.   Attack Type            : SQL-Injection Detect...
asm
ASM WAF
attack signatures
sql injection
Blue_whale's avatar
Blue_whale
Icon for Cirrocumulus rankCirrocumulus
8 months ago

word UNION was not found in the decoded request or on the parameter value . 

Injeyan_Kostas's avatar
Injeyan_Kostas
Icon for MVP rankMVP
8 months ago

But this is the detection

,\"Valore\":\"UNION-GLASS0x20S.R.L.\"},{\&quo

  • Blue_whale's avatar
    Blue_whale
    Icon for Cirrocumulus rankCirrocumulus
    1 month ago

    If i have to allow this parameter in Global level vs specific to url/uri ...what will be the difference in the configuration ?

    • Injeyan_Kostas's avatar
      Injeyan_Kostas
      Icon for MVP rankMVP
      1 month ago

      you could apply the exception on wildcard(*) url or parameter