Vulnerabilities

TI-2019-10901 CVE-2019-14678 · GHSA-65vm-7c4g-83vm

SAS XML Mapper 9.45 has an XML External Entity (XXE) vulnerability that can be leveraged…

MEDIUM 48

SAS XML Mapper 9.45 has an XML External Entity (XXE) vulnerability that can be leveraged by malicious attackers in multiple ways.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02951 Published 2019-11-14 No fix listed CWE-611

TI-2014-01793 CVE-2014-2262 · GHSA-fwfc-m344-9jp7

Buffer overflow in the client application in Base SAS 9.2 TS2M3, SAS 9.3 TS1M1 and TS1M2…

MEDIUM 47

Buffer overflow in the client application in Base SAS 9.2 TS2M3, SAS 9.3 TS1M1 and TS1M2, and SAS 9.4 TS1M0 allows user-assisted remote attackers to execute arbitrary code via a crafted SAS program.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04273 Published 2014-02-28 No fix listed CWE-119

Vulnerabilities

Filters

SAS XML Mapper 9.45 has an XML External Entity (XXE) vulnerability that can be leveraged…

Buffer overflow in the client application in Base SAS 9.2 TS2M3, SAS 9.3 TS1M1 and TS1M2…