Read the docs
TI-2018-01157 Aliases CVE-2018-1252GHSA-j738-m767-7w6j

RSA Web Threat Detection SQL Injection Vulnerability

Priority MEDIUM 42CWE-89Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
SQL injection
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-89.

Summary

RSA Web Threat Detection versions prior to 6.4, contain an SQL injection vulnerability in the Administration and Forensics applications. An authenticated malicious user with low privileges could potentially exploit this vulnerability to execute SQL commands on the back-end database to gain unauthorized access to the tool's monitoring and user information by supplying specially crafted input data to the affected application.

Why it matters now

EPSS 0.01931 80th percentileScored 2026-11-07
Fix Fixed Web Threat Detection (RSA): 6.4

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
RSAWeb Threat Detectionbefore 6.46.4Patch availableCNA
  • Web Threat Detection VendorRSA Affected before 6.4 Fixed in 6.4 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:rsa:web_threat_detection:*:*:*:*:*:*:*:*before 6.4VulnerableRSA
  • cpe:2.3:a:rsa:web_threat_detection:*:*:*:*:*:*:*:* Versions before 6.4 Vulnerable ·RSA

Remediation

  • Fix · CNA Web Threat Detection (RSA) Fixed in 6.4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-1252
  2. 2026-10-03 Alias added: GHSA-j738-m767-7w6j

References

Advisory 1

  • TI-2014-03812 SQL injection vulnerability in EMC RSA Web Threat Detection 4.x before 4.6.1.1 allows… CVSS 3.1HIGH 8.8
  • TI-2015-03826 EMC RSA Web Threat Detection before 5.1 SP1 allows local users to obtain root privileges… CVSS 2.0HIGH 7.2
  • TI-2015-00500 Cross-site request forgery (CSRF) vulnerability in EMC RSA Web Threat Detection before… CVSS 2.0MEDIUM 6.8
  • TI-2016-00828 Cross-site scripting in RSA Web Threat Detection RSA Web Threat Detection version 5.0… CVSS 3.1MEDIUM 6.1
  • TI-2015-03825 EMC RSA Web Threat Detection before 5.1 SP1 stores a cleartext AnnoDB password in a… CVSS 2.0MEDIUM 4.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences