CVE-2018-1252

CVE-2018-1252 describes an SQL injection vulnerability affecting RSA Web Threat Detection versions prior to 6.4, specifically within its Administration and Forensics applications. An authenticated, low-privileged attacker could exploit this flaw by submitting specially crafted input, leading to the execution of arbitrary SQL commands on the backend database. This high-severity vulnerability (CVSS 8.8) allows for unauthorized access to sensitive monitoring and user information, with high impact on confidentiality, integrity, and availability. While no public exploit intelligence (Metasploit, Nuclei, ExploitDB) or active exploitation is reported, and community discussion is minimal, the potential for significant data compromise remains.