Vulnerabilities

TI-2018-14715 CVE-2018-20733 · GHSA-gw3g-mv3w-862x

BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE.

LOW 35

BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01145 Published 2019-01-17 No fix listed CWE-611

TI-2018-14714 CVE-2018-20732 · GHSA-92hw-4jvj-v9ww

MEDIUM 49

SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code via a Java deserialization variant.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04033 Published 2019-01-17 No fix listed CWE-502

TI-2015-07659 CVE-2015-9281 · GHSA-9mm8-33cv-j397

LOW 28

Logon Manager in SAS Web Infrastructure Platform before 9.4M3 allows reflected XSS on the Timeout page.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00647 Published 2019-01-17 No fix listed CWE-79