SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 62511: SAS® Environment Manager contains a stored cross-site scripting vulnerability

DetailsHotfixAboutRate It

Severity: Low
Description: The web application might allow injection of malicious scripts into an input field within the user management area of the application, which is accessible only to administrators and authorized users.

Potential Impact: A user with administrative rights might unknowingly execute malicious code.

Click the Hot Fix tab in this note to access the hot fix for this issue.



Operating System and Release Information

Product FamilyProductSystemSAS Release
ReportedFixed*
SAS SystemSAS Environment ManagerMicrosoft® Windows® for x649.4 TS1M09.4 TS1M6
64-bit Enabled AIX9.4 TS1M09.4 TS1M6
64-bit Enabled Solaris9.4 TS1M09.4 TS1M6
HP-UX IPF9.4 TS1M09.4 TS1M6
Linux for x649.4 TS1M09.4 TS1M6
Solaris for x649.4 TS1M09.4 TS1M6
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.