Abbott interview question

What vulnerabilities come with implementing a web application firewall