The Flow Login feature prevents which web vulnerability from occurring?

Buffer overflow is mitigated by parameter length restrictions and input size controls at the parameter or entity body level, not by login flow enforcement.

Cookie poisoning is addressed by ASM cookie security features such as cookie signing and encryption, which detect or prevent tampering with cookie values.

Forceful browsing is an attack where a user bypasses intended workflow steps and directly requests a URL that should only be accessible after completing prior steps such as authentication. Flow Login enforces that users must enter through the designated login page and complete the required flow before any protected resource is served, neutralizing this attack vector.

Cross-site scripting is prevented by attack signature inspection and parameter value sanitization that detect malicious script injection in input fields.