Browse CVEs

MEDIUM 5.4 CVE-2023-4932 SAS application is vulnerable to Reflected Cross-Site Scripting (XSS). Improper input validation in the `_program` parameter of the the `/SASStoredPr… Integration Technologies Mitigation only Fix from $1,6002023-12-12 MEDIUM 5.4 CVE-2023-24724 A stored cross site scripting (XSS) vulnerability was discovered in the user management module of the SAS 9.4 Admin Console, due to insufficient vali… Web Administration Interface Mitigation only Fix from $1,6002023-04-03 MEDIUM 6.1 CVE-2022-25256 SAS Web Report Studio 4.4 allows XSS. /SASWebReportStudio/logonAndRender.do has two parameters: saspfs_request_backlabel_list and saspfs_request_back… Web Report Studio Mitigation only Fix from $1,6002022-02-19 MEDIUM 5.4 CVE-2021-35475 SAS Environment Manager 2.5 allows XSS through the Name field when creating/editing a server. The XSS will prompt when editing the Configuration Prop… Environment Manager No fix yet Fix from $1,6002021-06-25 MEDIUM 5.4 CVE-2020-9350 Graph Builder in SAS Visual Analytics 8.5 allows XSS via a graph template that is accessed directly. Visual Analytics Mitigation only Fix from $1,6002020-02-23 CRITICAL 10.0 CVE-2019-14678 SAS XML Mapper 9.45 has an XML External Entity (XXE) vulnerability that can be leveraged by malicious attackers in multiple ways. Examples are Local … Xml Mapper Mitigation only Fix from $2,3002019-11-14 MEDIUM 6.0 CVE-2014-5454 Unrestricted file upload vulnerability in the image upload module in SAS Visual Analytics 6.4M1 allows remote authenticated users to execute arbitrar… Visual Analytics No fix yet Fix from $1,6002014-08-25 HIGH 9.3 CVE-2014-2262 Buffer overflow in the client application in Base SAS 9.2 TS2M3, SAS 9.3 TS1M1 and TS1M2, and SAS 9.4 TS1M0 allows user-assisted remote attackers to … Base Sas Mitigation only Fix from $1,9502014-03-01 HIGH 10.0 CVE-2002-2017 sastcpd in SAS/Base 8.0 allows local users to execute arbitrary code by setting the authprog environment variable to reference a malicious program, w… Base Mitigation only Fix from $1,9502002-12-31