Severity: High

Description: SAS Environment Manager has several known high-severity security issues. To address these issues, updates are required to multiple components that are used by SAS Environment Manager. These components include Apache Tomcat, Apache ActiveMQ, and underlying Java libraries.

• CVE-2012-4431
• CVE-2013-2067
• CVE-2013-2071
• CVE-2014-0114
• CVE-2014-0230
• CVE-2014-7810
• CVE-2015-3253

Potential Impact: The impact varies. See the CVE links for details.

Click the Hot Fix tab in this note to access the hot fix for this issue.

Operating System and Release Information

A fix for this issue for SAS Environment Manager 2.5 is available at:

A fix for this issue for SAS Environment Manager 2.3 is available at:

A fix for this issue for SAS Environment Manager 2.1_M1 is available at:

A fix for this issue for SAS Web Server 9.4_M1 is available at:

A fix for this issue for SAS Environment Manager 2.1 is available at:

A fix for this issue for SAS Environment Manager Agent 2.1 is available at:

A fix for this issue for SAS Web Server 9.4 is available at: