CVE-2018-1252

RSA Web Threat Detection versions prior to 6.4, contain an SQL injection vulnerability in the Administration and Forensics applications. An authenticated malicious user with low privileges could potentially exploit this vulnerability to execute SQL commands on the back-end database to gain unauthorized access to the tool's monitoring and user information by supplying specially crafted input data to the affected application.

• CWE-89

• http://seclists.org/fulldisclosure/2018/Jun/4Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/104396Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041026Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Jun/4Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/104396Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041026Third Party Advisory, VDB Entry

Published

Jun 5, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-12501Nagios Fusion before 4.1.4 has XSS, aka TPS#13332-13335.
• CVE-2018-12503tinyexr 0.9.5 has a heap-based buffer over-read in LoadEXRIm…
• CVE-2018-12504tinyexr 0.9.5 has an assertion failure in ComputeChannelLayo…
• CVE-2018-1251Dell EMC Unity and UnityVSA versions prior to 4.3.1.15257030…8.3
• CVE-2018-12511In the mintToken function of a smart contract implementation…
• CVE-2018-12519An issue was discovered in ShopNx through 2017-11-17. The vu…
• CVE-2018-12520An issue was discovered in ntopng 3.4 before 3.4.180617. The…8.1
• CVE-2018-12522An issue was discovered in perfSONAR Monitoring and Debuggin…
• CVE-2018-12523An issue was discovered in perfSONAR Monitoring and Debuggin…
• CVE-2018-12524An issue was discovered in perfSONAR Monitoring and Debuggin…
• CVE-2018-12525An issue was discovered in perfSONAR Monitoring and Debuggin…
• CVE-2018-12526Telesquare SDT-CS3B1 and SDT-CW3B1 devices through 1.2.0 hav…