What’s Vulnerable › Vulnerabilities

CVE-2014-4627

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-11-07 · updated 2026-06-17
• Weakness: CWE-89

Description

SQL injection vulnerability in EMC RSA Web Threat Detection 4.x before 4.6.1.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Affected products

• RSA Web Threat Detection RSA Web Threat Detection version 5.0, RSA Web Threat Detection version 5.1, RSA Web Threat Dete: from 4.0 before 4.6.1.1 — fixed in 4.6.1.1

How to fix

Upgrade to a fixed version: RSA Web Threat Detection RSA Web Threat Detection version 5.0, RSA Web Threat Detection version 5.1, RSA Web Threat Dete 4.6.1.1. Check the vendor advisory for mitigations.

References

• http://archives.neohapsis.com/archives/bugtraq/2014-11/0028.html
• http://packetstormsecurity.com/files/128986/RSA-Web-Threat-Detection-SQL-Injection.html
• http://www.securityfocus.com/bid/70955
• http://www.securitytracker.com/id/1031172
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98523
• http://archives.neohapsis.com/archives/bugtraq/2014-11/0028.html
• http://packetstormsecurity.com/files/128986/RSA-Web-Threat-Detection-SQL-Injection.html
• http://www.securityfocus.com/bid/70955
• http://www.securitytracker.com/id/1031172
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98523

Get alerted when CVE-2014-4627 or the next vulnerability affects your stack