SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 67117: DataFlux® Data Management Studio 2.9 and DataFlux® Data Management Server 2.9 are affected by the JQuery vulnerability described in CVE-2020-11022

DetailsHotfixAboutRate It

Severity: Medium

Description: DataFlux Data Management Studio 2.9 and DataFlux Data Management Server 2.9 include a version of JQuery that is affected by the vulnerability described in CVE-2020-11022.

Potential Impact:  A user's web browser might execute untrustworthy code. For details, see the CVE report above.

Click the Hot Fix tab in this note to access the hot fix for this issue.

*Additional patches are required for DataFlux Secure. To obtain the DataFlux Secure patches, contact SAS Technical Support and reference this SAS Note. 



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
DatafluxDataFlux Data Management StudioWindows 7 Enterprise x642.9
Windows 7 Enterprise 32 bit2.9
Microsoft Windows XP Professional2.9
Microsoft Windows Server 20192.9
Microsoft Windows Server 20162.9
Microsoft Windows Server 2012 Std2.9
Microsoft Windows Server 2012 R2 Std2.9
Microsoft Windows Server 2012 R2 Datacenter2.9
Microsoft Windows Server 2012 Datacenter2.9
Microsoft Windows Server 2008 for x642.9
Microsoft Windows Server 2008 R22.9
Microsoft Windows Server 20082.9
Microsoft Windows Server 2003 for x642.9
Microsoft Windows Server 2003 Standard Edition2.9
Microsoft Windows Server 2003 Enterprise Edition2.9
Microsoft Windows Server 2003 Datacenter Edition2.9
Microsoft Windows NT Workstation2.9
Microsoft Windows 2000 Professional2.9
Microsoft Windows 2000 Server2.9
Microsoft Windows 2000 Datacenter Server2.9
Microsoft Windows 2000 Advanced Server2.9
Microsoft Windows 95/982.9
Microsoft Windows 102.9
Microsoft Windows 8.1 Pro x642.9
Microsoft Windows 8.1 Pro 32-bit2.9
Microsoft Windows 8.1 Enterprise x642.9
Microsoft Windows 8.1 Enterprise 32-bit2.9
Microsoft Windows 8 Pro x642.9
Microsoft Windows 8 Pro 32-bit2.9
Microsoft Windows 8 Enterprise x642.9
Microsoft Windows 8 Enterprise 32-bit2.9
Microsoft® Windows® for x642.9
Windows 7 Home Premium 32 bit2.9
Windows 7 Home Premium x642.9
Windows 7 Professional 32 bit2.9
Windows 7 Professional x642.9
Windows 7 Ultimate 32 bit2.9
Windows 7 Ultimate x642.9
Windows Millennium Edition (Me)2.9
Windows Vista2.9
Windows Vista for x642.9
DatafluxData Management ServerSolaris for x642.99.4 TS1M7
Linux for x642.99.4 TS1M7
HP-UX IPF2.99.4 TS1M7
64-bit Enabled Solaris2.99.4 TS1M7
64-bit Enabled AIX2.99.4 TS1M7
Windows 7 Ultimate x642.99.4 TS1M7
Windows 7 Ultimate 32 bit2.99.4 TS1M7
Windows 7 Professional x642.99.4 TS1M7
Windows 7 Professional 32 bit2.99.4 TS1M7
Windows 7 Home Premium x642.99.4 TS1M7
Windows 7 Home Premium 32 bit2.99.4 TS1M7
Windows 7 Enterprise x642.99.4 TS1M7
Windows 7 Enterprise 32 bit2.99.4 TS1M7
Microsoft Windows Server 20192.99.4 TS1M7
Microsoft Windows Server 20162.99.4 TS1M7
Microsoft Windows Server 2012 Std2.99.4 TS1M7
Microsoft Windows Server 2012 R2 Std2.99.4 TS1M7
Microsoft Windows Server 2012 R2 Datacenter2.99.4 TS1M7
Microsoft Windows Server 2012 Datacenter2.99.4 TS1M7
Microsoft Windows Server 2008 for x642.99.4 TS1M7
Microsoft Windows Server 2008 R22.99.4 TS1M7
Microsoft Windows Server 20082.99.4 TS1M7
Microsoft Windows 102.99.4 TS1M7
Microsoft Windows 8.1 Pro x642.99.4 TS1M7
Microsoft Windows 8.1 Pro 32-bit2.99.4 TS1M7
Microsoft Windows 8.1 Enterprise x642.99.4 TS1M7
Microsoft Windows 8.1 Enterprise 32-bit2.99.4 TS1M7
Microsoft Windows 8 Pro x642.99.4 TS1M7
Microsoft Windows 8 Pro 32-bit2.99.4 TS1M7
Microsoft Windows 8 Enterprise x642.99.4 TS1M7
Microsoft Windows 8 Enterprise 32-bit2.99.4 TS1M7
Microsoft® Windows® for x642.99.4 TS1M7
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.