Running Policy Server configured with SNMP stack, this one allows:
1) The "SNMP 'GETBULK' Reflection DDoS";
2) Default SNMP Community Strings;
3) SNMP Agent Default Community Name;
These vulnerabilities are outside the Policy Server code.
Work with your Vendor support and/or OS Administrator to mitigate them.