SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 62908: SAS® Studio contains a stored cross-site scripting vulnerability

DetailsHotfixAboutRate It

Severity: Medium

Description: SAS Studio contains a stored cross-site scripting vulnerability within its Server Files and Folders functionality.

Potential Impact: Users might unknowingly execute malicious code.

Click the Hot Fix tab in this note to access the hot fix for this issue.



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemSAS StudioMicrosoft® Windows® for x644.3Viya
Microsoft Windows 8 Enterprise 32-bit4.3Viya
Microsoft Windows 8 Enterprise x644.3Viya
Microsoft Windows 8 Pro 32-bit4.3Viya
Microsoft Windows 8 Pro x644.3Viya
Microsoft Windows 8.1 Enterprise 32-bit4.3Viya
Microsoft Windows 8.1 Enterprise x644.3Viya
Microsoft Windows 8.1 Pro 32-bit4.3Viya
Microsoft Windows 8.1 Pro x644.3Viya
Microsoft Windows 104.3Viya
Microsoft Windows 95/984.3Viya
Microsoft Windows 2000 Advanced Server4.3Viya
Microsoft Windows 2000 Datacenter Server4.3Viya
Microsoft Windows 2000 Server4.3Viya
Microsoft Windows 2000 Professional4.3Viya
Microsoft Windows NT Workstation4.3Viya
Microsoft Windows Server 2003 Datacenter Edition4.3Viya
Microsoft Windows Server 2003 Enterprise Edition4.3Viya
Microsoft Windows Server 2003 Standard Edition4.3Viya
Microsoft Windows Server 2003 for x644.3Viya
Microsoft Windows Server 20084.3Viya
Microsoft Windows Server 2008 R24.3Viya
Microsoft Windows Server 2008 for x644.3Viya
Microsoft Windows Server 2012 Datacenter4.3Viya
Microsoft Windows Server 2012 R2 Datacenter4.3Viya
Microsoft Windows Server 2012 R2 Std4.3Viya
Microsoft Windows Server 2012 Std4.3Viya
Microsoft Windows Server 20164.3Viya
Microsoft Windows XP Professional4.3Viya
Windows 7 Enterprise 32 bit4.3Viya
Windows 7 Enterprise x644.3Viya
Windows 7 Home Premium 32 bit4.3Viya
Windows 7 Home Premium x644.3Viya
Windows 7 Professional 32 bit4.3Viya
Windows 7 Professional x644.3Viya
Windows 7 Ultimate 32 bit4.3Viya
Windows 7 Ultimate x644.3Viya
Windows Millennium Edition (Me)4.3Viya
Windows Vista4.3Viya
Windows Vista for x644.3Viya
Linux for x644.3Viya
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.