Sas

Records18All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

Sas records in CISA KEV

No Sas vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Web Infrastructure Platform · all components

TI-2018-14714 CVE-2018-20732 · GHSA-92hw-4jvj-v9ww

MEDIUM 49

SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code via a Java deserialization variant.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04033 Published 2019-01-17 No fix listed CWE-502

TI-2018-14715 CVE-2018-20733 · GHSA-gw3g-mv3w-862x

LOW 35

BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01145 Published 2019-01-17 No fix listed CWE-611

TI-2015-07659 CVE-2015-9281 · GHSA-9mm8-33cv-j397

LOW 28

Logon Manager in SAS Web Infrastructure Platform before 9.4M3 allows reflected XSS on the Timeout page.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00647 Published 2019-01-17 No fix listed CWE-79