Severity: Informational

Description: SAS 9.4 software includes Apache Struts libraries at run time, but the software does not use the libraries.

Potential Impact: Although the affected SAS components do not use these libraries at run time, the libraries are loaded by the Java Virtual Machine as transitive dependencies. As a result, the libraries can be flagged as a threat by a security scan.

Click the Hot Fix tab in this note to access the hot fixes for this issue, or use the SAS Hot Fix Analysis, Download and Deployment Tool to identify all applicable hot fixes for your software deployment.

Operating System and Release Information

A fix for this issue for SAS Credit Scoring 6.3 is available at:

A fix for this issue for SAS Studio 3.8 is available at:

A fix for this issue for Data Integration Studio 4.904 is available at:

A fix for this issue for SAS/GRAPH Java Applets for Web Servers 9.45 is available at:

A fix for this issue for SAS Factory Miner 15.1 is available at:

A fix for this issue for SAS Grid Manager Plug-ins for SAS Management Console 9.4_M6 is available at:

A fix for this issue for SAS Contextual Analysis 15.1 is available at:

A fix for this issue for SAS Micro Analytic Service 2.5_M1 is available at:

A fix for this issue for SAS Workflow Studio 1.3_M5 is available at:

A fix for this issue for SAS Grid Manager Module for SAS Environment Manager 1.6 is available at:

A fix for this issue for SAS Forecast Server 15.1 is available at:

A fix for this issue for SAS Time Series Studio 15.1 is available at:

A fix for this issue for SAS BI Lineage Plug-in for SAS Management Console 4.4_M6 is available at:

A fix for this issue for SAS Management Console 9.4_M6 is available at:

A fix for this issue for SAS Data Surveyor for SAP 5.41 is available at:

A fix for this issue for SAS Information Map Studio 4.4_M6 is available at:

A fix for this issue for SAS OLAP Cube Studio 4.4_M6 is available at:

A fix for this issue for Platform Web Services for SAS 1.6 is available at:

A fix for this issue for SAS Studio 3.71 is available at:

A fix for this issue for SAS Studio 3.7 is available at:

A fix for this issue for SAS Scalable Performance Data Server 5.4 is available at: