Vendor/product archive

sas / integration_technologies CVEs

Beta · best-effort

3 CVEs tagged to sas / integration_technologies — 1 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to sas vendor archive

CVE-2023-4932

Published Dec 12, 2023

SAS application is vulnerable to Reflected Cross-Site Scripting (XSS). Improper input validation in the `_program` parameter of the the `/SASStoredProcess/do` endpoint allows arbi…

CVSS 6.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2002-2017

Published Dec 31, 2002

sastcpd in SAS/Base 8.0 allows local users to execute arbitrary code by setting the authprog environment variable to reference a malicious program, which is then executed by sastc…

CVSS 10.0 · Critical

Vendor/product tagsBeta · best-effort

CVE-2002-2018

Published Dec 31, 2002

sastcpd in SAS/Base 8.0 might allow local users to gain privileges by setting the netencralg environment variable, which causes a segmentation fault.

CVSS 7.2 · High

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1