Sas vulnerabilities

Products

• Integration Technologies 3
• Studio 3
• Web Infrastructure Platform 3
• Base 2
• Base Sas 2
• Base 2
• Integration Technologies 2
• Visual Analytics 2

Newest

• sas studio Directory Traversal in /SASStudio/sasexec/sessions/{sessionID}/workspace/{InternalPath} in SAS... CVE-2024-48735 Disputed 7.7 HighOctober 30, 2024
• sas studio *Unrestricted file upload in /SASStudio/SASStudio/sasexec/{sessionID}/{InternalPath} in SAS... CVE-2024-48734 Disputed 8.8 HighOctober 30, 2024
• sas studio SQL injection vulnerability in /SASStudio/sasexec/sessions/{sessionID}/sql in SAS Studio 9.4... CVE-2024-48733 Disputed 8.8 HighOctober 30, 2024
• sas integration technologies Reflected Cross-Site Scripting in SAS 9.4 CVE-2023-4932 6.3 MediumDecember 12, 2023
• sas web administration interface A stored cross site scripting (XSS) vulnerability was discovered in the user management module of... CVE-2023-24724 5.4 MediumApril 3, 2023
• sas web report studio SAS Web Report Studio 4.4 allows XSS. /SASWebReportStudio/logonAndRender.do has two parameters:... CVE-2022-25256 Public exploit 6.1 MediumFebruary 19, 2022
• sas sas\/intrnet SAS/Intrnet 9.4 build 1520 and earlier allows Local File Inclusion. The samples library (included... CVE-2021-41569 7.5 HighNovember 19, 2021
• sas environment manager SAS Environment Manager 2.5 allows XSS through the Name field when creating/editing a server. The... CVE-2021-35475 Public exploit 5.4 MediumJune 25, 2021
• sas go rpm utils Arbitrary File Write via Archive Extraction (Zip Slip) CVE-2020-7667 Fix available 7.5 HighJune 24, 2020
• sas visual analytics Graph Builder in SAS Visual Analytics 8.5 allows XSS via a graph template that is accessed directly. CVE-2020-9350 5.4 MediumFebruary 23, 2020
• sas xml mapper, base sas +1 more SAS XML Mapper 9.45 has an XML External Entity (XXE) vulnerability that can be leveraged by... CVE-2019-14678 Public exploit 10.0 CriticalNovember 14, 2019
• sas drug development SAS Drug Development (SDD) before 32DRG02 mishandles logout actions, which allows a user (who was... CVE-2007-6763 8.8 HighJuly 31, 2019
• sas web infrastructure platform BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE. CVE-2018-20733 7.5 HighJanuary 17, 2019
• sas web infrastructure platform SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code... CVE-2018-20732 9.8 CriticalJanuary 17, 2019
• sas web infrastructure platform Logon Manager in SAS Web Infrastructure Platform before 9.4M3 allows reflected XSS on the Timeout... CVE-2015-9281 6.1 MediumJanuary 17, 2019
• sas visual analytics Unrestricted file upload vulnerability in the image upload module in SAS Visual Analytics 6.4M1... CVE-2014-5454 6.0 MediumAugust 25, 2014
• sas base sas Buffer overflow in the client application in Base SAS 9.2 TS2M3, SAS 9.3 TS1M1 and TS1M2, and SAS... CVE-2014-2262 9.3 HighFebruary 28, 2014
• sas base, integration technologies +1 more sastcpd in SAS/Base 8.0 might allow local users to gain privileges by setting the netencralg... CVE-2002-2018 7.2 HighDecember 31, 2002
• sas base, integration technologies +1 more sastcpd in SAS/Base 8.0 allows local users to execute arbitrary code by setting the authprog... CVE-2002-2017 10.0 HighDecember 31, 2002
• sas base, integration technologies +1 more Buffer overflow in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration... CVE-2002-0219 7.2 HighMay 3, 2002
• sas base, integration technologies +1 more Format string vulnerability in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS... CVE-2002-0218 7.2 HighMay 3, 2002