Sas

Records18All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

Sas records in CISA KEV

No Sas vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Integration Technologies 3 records MEDIUM Web Infrastructure Platform 3 records MEDIUM Base 2 records MEDIUM Base Sas 2 records MEDIUM Sas Base 2 records LOW Sas Integration Technologies 2 records LOW Visual Analytics 2 records LOW Environment Manager 1 record LOW

Records

2 records in Base Sas · all components

TI-2019-10901 CVE-2019-14678 · GHSA-65vm-7c4g-83vm

SAS XML Mapper 9.45 has an XML External Entity (XXE) vulnerability that can be leveraged…

MEDIUM 48

SAS XML Mapper 9.45 has an XML External Entity (XXE) vulnerability that can be leveraged by malicious attackers in multiple ways.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02951 Published 2019-11-14 No fix listed CWE-611

TI-2014-01793 CVE-2014-2262 · GHSA-fwfc-m344-9jp7

Buffer overflow in the client application in Base SAS 9.2 TS2M3, SAS 9.3 TS1M1 and TS1M2…

MEDIUM 47

Buffer overflow in the client application in Base SAS 9.2 TS2M3, SAS 9.3 TS1M1 and TS1M2, and SAS 9.4 TS1M0 allows user-assisted remote attackers to execute arbitrary code via a crafted SAS program.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04273 Published 2014-02-28 No fix listed CWE-119

Open these records in search →

Critical	4
High	7
Medium	7
Low	0
No CVSS	0