2 matches found
Sql injection
RSA Web Threat Detection versions prior to 6.4, contain an SQL injection vulnerability in the Administration and Forensics applications. An authenticated malicious user with low privileges could potentially exploit this vulnerability to execute SQL commands on the back-end database to gain...
6.5CVSS8.9AI score0.01971EPSS
SaveExploits0References3Affected Software1
PT-2018-11227
Name of the Vulnerable Software and Affected Versions RSA Web Threat Detection versions prior to 6.4 Description The issue allows an authenticated malicious user with low privileges to potentially execute SQL commands on the back-end database by supplying specially crafted input data to the...
8.8CVSS0.01971EPSS
SaveExploits0References5
20