You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
| WAF Attack Score |[`cf.waf.score`](/ruleset-engine/rules-language/fields/reference/cf.waf.score/) <br/> <Typetext="Number" /> | Enterprise | A global score from 1–99 that combines the score of each WAF attack vector into a single score. |
30
-
| WAF SQLi Attack Score |[`cf.waf.score.sqli`](/ruleset-engine/rules-language/fields/reference/cf.waf.score.sqli/) <br/> <Typetext="Number" /> | Enterprise | A score from 1–99 classifying the [SQL injection][1] (SQLi) attack vector. |
31
-
| WAF XSS Attack Score |[`cf.waf.score.xss`](/ruleset-engine/rules-language/fields/reference/cf.waf.score.xss/) <br/> <Typetext="Number" /> | Enterprise | A score from 1–99 classifying the [cross-site scripting][2] (XSS) attack vector. |
32
-
| WAF RCE Attack Score |[`cf.waf.score.rce`](/ruleset-engine/rules-language/fields/reference/cf.waf.score.rce/) <br/> <Typetext="Number" /> | Enterprise | A score from 1–99 classifying the command injection or [remote code execution][3] (RCE) attack vector. |
33
-
| WAF Attack Score Class |[`cf.waf.score.class`](/ruleset-engine/rules-language/fields/reference/cf.waf.score.class/) <br/> <Typetext="String" /> | Business or above | The attack score class of the current request, based on the WAF attack score. |
| WAF Attack Score <br/> [`cf.waf.score`][1] <br/> <Typetext="Number" /> | A global score from 1–99 that combines the score of each WAF attack vector into a single score. | Enterprise |
30
+
| WAF SQLi Attack Score <br/> [`cf.waf.score.sqli`][2] <br/> <Typetext="Number" /> | A score from 1–99 classifying the [SQL injection][6] (SQLi) attack vector. | Enterprise |
31
+
| WAF XSS Attack Score <br/> [`cf.waf.score.xss`][3] <br/> <Typetext="Number" /> | A score from 1–99 classifying the [cross-site scripting][7] (XSS) attack vector. | Enterprise |
32
+
| WAF RCE Attack Score <br/> [`cf.waf.score.rce`][4] <br/> <Typetext="Number" /> | A score from 1–99 classifying the command injection or [remote code execution][8] (RCE) attack vector. | Enterprise |
33
+
| WAF Attack Score Class <br/> [`cf.waf.score.class`][5] <br/> <Typetext="String" /> | The attack score class of the current request, based on the WAF attack score. <br/> Possible values: `attack`, `likely_attack`, `likely_clean`, and `clean`. | Business or above |
You can use these fields in expressions of [custom rules](/waf/custom-rules/) and [rate limiting rules](/waf/rate-limiting-rules/). Attack score fields of data type `Number` vary between `1` and `99` with the following meaning:
0 commit comments