Security testing performed on your SAS® software applications might indicate a cross-site scripting vulnerability in the SAS web applications that are part of the SAS Web Infrastructure Platform and SAS Flex Application Themes.

Operating System and Release Information

Product Family	Product	System	Product Release		SAS Release
			Reported	Fixed*	Reported	Fixed*
SAS System	SAS Web Infrastructure Platform	Microsoft® Windows® for x64	9.3_M2	9.4_M1	9.3 TS1M2	9.4 TS1M0
		64-bit Enabled AIX	9.3_M2	9.4_M1	9.3 TS1M2	9.4 TS1M0
		64-bit Enabled Solaris	9.3_M2	9.4_M1	9.3 TS1M2	9.4 TS1M0
		HP-UX IPF	9.3_M2	9.4_M1	9.3 TS1M2	9.4 TS1M0
		Linux for x64	9.3_M2	9.4_M1	9.3 TS1M2	9.4 TS1M0
		Solaris for x64	9.3_M2	9.4_M1	9.3 TS1M2	9.4 TS1M0
SAS System	SAS Flex Application Themes	Microsoft® Windows® for x64	3.4	4.2	9.3 TS1M2	9.4 TS1M0
		64-bit Enabled AIX	3.4	4.2	9.3 TS1M2	9.4 TS1M0
		64-bit Enabled Solaris	3.4	4.2	9.3 TS1M2	9.4 TS1M0
		HP-UX IPF	3.4	4.2	9.3 TS1M2	9.4 TS1M0
		Linux for x64	3.4	4.2	9.3 TS1M2	9.4 TS1M0
		Solaris for x64	3.4	4.2	9.3 TS1M2	9.4 TS1M0

* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.

---

A fix for this issue for SAS Flex Application Themes 3.4 is available at:

https://tshf.sas.com/techsup/download/hotfix/HF2/M21.html#51491

---

A fix for this issue for SAS Middle Tier 9.3_M2 is available at:

https://tshf.sas.com/techsup/download/hotfix/HF2/I14.html#51491

---

A fix for this issue for SAS Middle Tier 9.3_M1 is available at:

https://tshf.sas.com/techsup/download/hotfix/HF2/G38.html#51491

---

Type:	Problem Note
Priority:	high

Date Modified:	2013-10-31 18:01:39
Date Created:	2013-10-31 17:52:44