SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 66067: SAS® Fraud Management contains a cross-site scripting vulnerability

DetailsHotfixAboutRate It

Severity: Medium

Description: SAS Fraud Management contains a cross-site scripting vulnerability in its Business Unit user interface functionality.

Potential Impact: A user might unknowingly execute malicious code.

Click the Hot Fix tab in this note to access the hot fix for this issue.



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemSAS Fraud Managementz/OS 64-bit4.4_M19.4 TS1M5
Microsoft® Windows® for x644.4_M19.4 TS1M5
64-bit Enabled AIX4.4_M19.4 TS1M5
64-bit Enabled Solaris4.4_M19.4 TS1M5
HP-UX IPF4.4_M19.4 TS1M5
Linux for x644.4_M19.4 TS1M5
Solaris for x644.4_M19.4 TS1M5
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.