Loading product vulnerabilities…
Total
3
Critical
0
High
0
Medium
0
CISA KEV
0
BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE.
SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code via a Java deserialization variant.
Logon Manager in SAS Web Infrastructure Platform before 9.4M3 allows reflected XSS on the Timeout page.