61582 - SAS® Anti-Money Laundering contains cross-site scripting security vulnerabilities

Support

Submit a Problem
Update a Problem
Check Problem Status
SAS Administrators
Security Bulletins
License Assistance
Manage My Software Account
Downloads & Hot Fixes
Samples & SAS Notes

Problem Note 61582: SAS® Anti-Money Laundering contains cross-site scripting security vulnerabilities

Details

Hotfix

About

Rate It

Severity: Medium

Description: SAS Anti-Money Laundering contains cross-site scripting (XSS) security vulnerabilities.

CVE-2015-0899
CVE-2015-1181
CVE-2015-1182

Note: A different XSS vulnerability is fixed in Hot Fix 3 (A5T004) and in Hot Fix 13 (A5T017).

Potential Impact: Users might unknowingly execute malicious code.

Click the Hot Fix tab in this note to access the hot fix for this issue.

Operating System and Release Information

Product Family	Product	System	Product Release		SAS Release
Product Family	Product	System	Reported	Fixed*	Reported	Fixed*
SAS System	SAS Anti-Money Laundering	Linux for x64	7.1
		64-bit Enabled Solaris	7.1
		64-bit Enabled AIX	7.1
		Microsoft® Windows® for x64	7.1

* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.

A fix for this issue for SAS Compliance Solutions 7.1 is available at:

https://tshf.sas.com/techsup/download/hotfix/HF2/A5T.html#61582

Type:	Problem Note
Priority:	high

Date Modified:	2021-07-26 09:20:11
Date Created:	2017-12-14 15:33:16