55539 - The SAS® 9.4 Web Administration interface contains a cross-site scripting vulnerability.

SUPPORT / SAMPLES & SAS NOTES

Support

Problem Note 55539: The SAS® 9.4 Web Administration interface contains a cross-site scripting vulnerability.

Severity: Medium

Description: The notification-template functionality of the SAS Web Administration interface (SASAdmin) contains a cross-site scripting vulnerability.

Potential Impact: Users might unknowingly execute malicious code.

Click the Hot Fix tab in this note to access the hot fix for this issue.

Operating System and Release Information

Product Family	Product	System	Product Release		SAS Release
Product Family	Product	System	Reported	Fixed*	Reported	Fixed*
SAS System	SAS Web Infrastructure Platform	Microsoft® Windows® for x64	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		64-bit Enabled AIX	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		64-bit Enabled Solaris	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		HP-UX IPF	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Linux for x64	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8
		Solaris for x64	9.4_M7	9.4_M8	9.4 TS1M7	9.4 TS1M8

* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.

Type:	Problem Note
Priority:	high

Date Modified:	2015-04-15 08:31:26
Date Created:	2015-04-10 11:37:49

Support

Problem Note 55539: The SAS® 9.4 Web Administration interface contains a cross-site scripting vulnerability.

Operating System and Release Information

Follow Us

What is...