Vendors / Sas Records 18 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 7
Exploited now Sas records in CISA KEV No Sas vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 48
sastcpd in SAS/Base 8.0 allows local users to execute arbitrary code by setting the authprog environment variable to reference a malicious program, which is then executed by sastcpd.
CVSS 2.0 HIGH 10.0· Network · No auth · Interaction — · EPSS 0.02468 · Published 2005-07-14 · No fix listed
Priority LOW 32
sastcpd in SAS/Base 8.0 might allow local users to gain privileges by setting the netencralg environment variable, which causes a segmentation fault.
CVSS 2.0 HIGH 7.2· Local · No auth · Interaction — · EPSS 0.0034 · Published 2005-07-14 · No fix listed
Priority LOW 29
SAS application is vulnerable to Reflected Cross-Site Scripting (XSS).
CVSS 3.1 MEDIUM 6.3· Adjacent network · Low privileges · User interaction · EPSS 0.00632 · Published 2023-12-12 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
4 7 7 0 0
