Problem Note 68830: SAS® Infrastructure for Risk Management contains a version of jQuery with known vulnerabilities
 |  |  |  |  |
Severity: Medium
Description: SAS Infrastructure for Risk Management contains a jQuery 3.3.1 library, which is known to be affected by the vulnerabilities described in the following CVEs
Potential Impact: Refer to CVE records listed in the previous section for additional details.
Click the Hot Fix tab in this note to access the hot fix for this issue.
Operating System and Release Information
| Product Family | Product | System | Product Release | SAS Release | ||
| Reported | Fixed* | Reported | Fixed* | |||
| SAS System | SAS Infrastructure for Risk Management | Microsoft® Windows® for x64 | 3.6 | 9.4 TS1M6 | ||
| Linux for x64 | 3.6 | 9.4 TS1M6 | ||||
A fix for this issue for SAS Infrastructure for Risk Management 3.6 is available at:
https://tshf.sas.com/techsup/download/hotfix/HF2/G2T.html#68830A fix for this issue for SAS Infrastructure for Risk Management 3.6 is available at:
https://tshf.sas.com/techsup/download/hotfix/HF2/G2T.html#68830| Type: | Problem Note |
| Priority: | high |
| Date Modified: | 2022-02-02 13:57:19 |
| Date Created: | 2022-01-24 13:28:57 |