CVE-2018-1252: RSA Web Threat Detection SQL Injection Vulnerability

Security readout for executives and security teams

CVE-2018-1252 is an authenticated SQL injection issue in RSA Web Threat Detection before version 6.4. A low-privileged user could abuse affected Administration and Forensics application inputs to run database commands and access monitoring or user information. No provided source shows active exploitation. Exposure is most likely where RSA Web Threat Detection is deployed and low-privileged users can authenticate to Administration or Forensics functions. Internet exposure is not established in the provided sources. Prioritize remediation if RSA Web Threat Detection is present. The product handles security monitoring data, so database compromise could expose sensitive visibility and user information. Urgency is lower where access is tightly restricted, but pre-6.4 systems should not remain unaddressed. Mitigation focus: Inventory RSA Web Threat Detection deployments and identify versions below 6.4.; Review RSA DSA-2018-085 and apply the vendor-supported fixed release.; Restrict Administration and Forensics access to trusted users and networks..

Prepared

Jun 7, 2026, 06:44 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.