# F5 Rules for AWS WAF - List of CVE

**URL:** <https://community.f5.com/t/f5-rules-for-aws-waf-list-of-cve/72011>\
**Category:** Technical Forums\
**Tags:** cve, waf, aws, cloud, security, f5-rules-for-aws-waf\
**Created:** [March 31, 2023, 7:34am UTC](https://community.f5.com/t/f5-rules-for-aws-waf-list-of-cve/72011 "2023-03-31T07:34:57Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![pracaburo](https://avatars.discourse-cdn.com/v4/letter/p/e5b9ba/32.png) [@pracaburo](https://community.f5.com/u/pracaburo)\
**Post date:** [March 31, 2023, 7:34am UTC](https://community.f5.com/t/f5-rules-for-aws-waf-list-of-cve/72011/1 "2023-03-31T07:34:57Z")

</div>

I have checked the AWS WAF F5 rule - Common Vulnerabilities and Exposures (CVE) rule on the AWS marketplace, but is there a WAF rule that corresponds to the following CVE?- CVE-2022-24963([https://nvd.nist.gov/vuln/detail/CVE-2022-24963#match-8865215](https://nvd.nist.gov/vuln/detail/CVE-2022-24963#match-8865215))- CVE-2022-25147([https://nvd.nist.gov/vuln/detail/CVE-2022-25147](https://nvd.nist.gov/vuln/detail/CVE-2022-25147))

---

<div class="post-metadata">

**Author:** ![Joel\_Cohen](https://d1p9zq3aats0t8.cloudfront.net/user_avatar/community.f5.com/joel_cohen/32/20598_2.png) [@Joel\_Cohen](https://community.f5.com/u/Joel_Cohen)\
**Post date:** [April 3, 2023, 2:03pm UTC](https://community.f5.com/t/f5-rules-for-aws-waf-list-of-cve/72011/2 "2023-04-03T14:03:03Z")

</div>

Thes two CVEs correspon to Integer Overflows, which are attacks that&nbsp;can not really be mitigated with AWS rules.

A common methon in application security for mitigating such attacks are size limits on paramters, for example.

That said, the F5 Rules for AWS WAF - CVE group does not have rules for the CVEs in question.

Thanks