Skip to content
OpenAdvisories

Vendor

SAS Institute

1 known vulnerabilities.

Products

SAS Integration Technologies 1 Base SAS 0
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2023-4932

    Reflected Cross-Site Scripting in SAS 9.4

    SAS application is vulnerable to Reflected Cross-Site Scripting (XSS). Improper input validation in the `_program` parameter of the the `/SASStoredProcess/do` endpoint allows arbitrary JavaScript to be executed when specially crafted URL is opened by an authe…

    SAS Institute SAS Integration Technologies