SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 65492: SAS® Visual Investigator contains a cross-site scripting vulnerability

DetailsHotfixAboutRate It

Severity: Medium

Description: SAS Visual Investigator contains cross-site scripting vulnerabilities in the /svi-datahub/documents endpoint and in the Audit Report interface.

Potential Impact: Users might execute malicious code unknowingly.

Click the Hot Fix tab in this note to access the hot fix for this issue.



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemSAS Visual InvestigatorLinux for x6410.610.6ViyaViya
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.