69836 - DataFlux® Data Management Studio and DataFlux® Data Management Server 2.9 contain components with known vulnerabilities

Problem Note 69836: DataFlux® Data Management Studio and DataFlux® Data Management Server 2.9 contain components with known vulnerabilities

Severity: Critical

Description: DataFlux Data Management Studio and DataFlux Data Management Server 2.9 contain components that are affected by the following known vulnerabilities:

Data Management Studio	Data Management Server
CVE-2022-23305	CVE-2022-22965
CVE-2022-22965	CVE-2016-1000027
CVE-2020-9493	CVE-2021-22118
CVE-2019-17571	CVE-2022-25647
CVE-2016-1000027	CVE-2021-40690
CVE-2022-23307	CVE-2021-35517
CVE-2022-23302	CVE-2022-42003
CVE-2020-13936	CVE-2022-23596
CVE-2021-22118	CVE-2020-36518
CVE-2022-42004	CVE-2021-36090
CVE-2022-42003	CVE-2021-37714
CVE-2022-25647	CVE-2021-35515
CVE-2022-23596	CVE-2021-35516
CVE-2021-4104	CVE-2022-42004
CVE-2021-40690	CVE-2021-33813
CVE-2021-37714	CVE-2022-23437
CVE-2021-36090	CVE-2022-22971
CVE-2021-35517	CVE-2022-22950
CVE-2021-35516	CVE-2022-36033
CVE-2021-35515	CVE-2021-22569
CVE-2021-33813	CVE-2022-30126
CVE-2021-30468	CVE-2022-25169
CVE-2021-22696	CVE-2022-30973
CVE-2020-36518	CVE-2022-24613
CVE-2022-22971	CVE-2022-24614
CVE-2022-22950	CVE-2022-22970
CVE-2022-36033	CVE-2022-22968
CVE-2022-30973	CVE-2020-13956
CVE-2022-30126	CVE-2021-22060
CVE-2022-25169	CVE-2021-22096
CVE-2022-24614	CVE-2022-33879
CVE-2022-24613
CVE-2021-31812
CVE-2021-31811
CVE-2021-28657
CVE-2021-27906
CVE-2021-27807
CVE-2021-22569
CVE-2022-22970
CVE-2022-22968
CVE-2021-22096
CVE-2021-22060
CVE-2022-33879

Potential Impact: Impacts vary. Refer to the CVE records listed in the previous section for details.

Click the Hot Fix tab in this note to access the hot fix for this issue.

Operating System and Release Information

Product Family	Product	System	Product Release		SAS Release
Product Family	Product	System	Reported	Fixed*	Reported	Fixed*
Dataflux	DataFlux Data Management Studio	Microsoft® Windows® for x64	2.9
		Microsoft Windows 8 Enterprise 32-bit	2.9
		Microsoft Windows 8 Enterprise x64	2.9
		Microsoft Windows 8 Pro 32-bit	2.9
		Microsoft Windows 8 Pro x64	2.9
		Microsoft Windows 8.1 Enterprise 32-bit	2.9
		Microsoft Windows 8.1 Enterprise x64	2.9
		Microsoft Windows 8.1 Pro 32-bit	2.9
		Microsoft Windows 8.1 Pro x64	2.9
		Microsoft Windows 10	2.9
		Microsoft Windows 11	2.9
		Microsoft Windows 95/98	2.9
		Microsoft Windows 2000 Advanced Server	2.9
		Microsoft Windows 2000 Datacenter Server	2.9
		Microsoft Windows 2000 Server	2.9
		Microsoft Windows 2000 Professional	2.9
		Microsoft Windows NT Workstation	2.9
		Microsoft Windows Server 2003 Datacenter Edition	2.9
		Microsoft Windows Server 2003 Enterprise Edition	2.9
		Microsoft Windows Server 2003 Standard Edition	2.9
		Microsoft Windows Server 2003 for x64	2.9
		Microsoft Windows Server 2008	2.9
		Microsoft Windows Server 2008 R2	2.9
		Microsoft Windows Server 2008 for x64	2.9
		Microsoft Windows Server 2012 Datacenter	2.9
		Microsoft Windows Server 2012 R2 Datacenter	2.9
		Microsoft Windows Server 2012 R2 Std	2.9
		Microsoft Windows Server 2012 Std	2.9
		Microsoft Windows Server 2016	2.9
		Microsoft Windows Server 2019	2.9
		Microsoft Windows Server 2022	2.9
		Microsoft Windows XP Professional	2.9
		Windows 7 Enterprise 32 bit	2.9
		Windows 7 Enterprise x64	2.9
		Windows 7 Home Premium 32 bit	2.9
		Windows 7 Home Premium x64	2.9
		Windows 7 Professional 32 bit	2.9
		Windows 7 Professional x64	2.9
		Windows 7 Ultimate 32 bit	2.9
		Windows 7 Ultimate x64	2.9
		Windows Millennium Edition (Me)	2.9
		Windows Vista	2.9
		Windows Vista for x64	2.9
Dataflux	DataFlux Data Management Server	Microsoft® Windows® for x64	2.9
		Microsoft Windows 8 Enterprise 32-bit	2.9
		Microsoft Windows 8 Enterprise x64	2.9
		Microsoft Windows 8 Pro 32-bit	2.9
		Microsoft Windows 8 Pro x64	2.9
		Microsoft Windows 8.1 Enterprise 32-bit	2.9
		Microsoft Windows 8.1 Enterprise x64	2.9
		Microsoft Windows 8.1 Pro 32-bit	2.9
		Microsoft Windows 8.1 Pro x64	2.9
		Microsoft Windows 10	2.9
		Microsoft Windows 11	2.9
		Microsoft Windows 95/98	2.9
		Microsoft Windows 2000 Advanced Server	2.9
		Microsoft Windows 2000 Datacenter Server	2.9
		Microsoft Windows 2000 Server	2.9
		Microsoft Windows 2000 Professional	2.9
		Microsoft Windows NT Workstation	2.9
		Microsoft Windows Server 2003 Datacenter Edition	2.9
		Microsoft Windows Server 2003 Enterprise Edition	2.9
		Microsoft Windows Server 2003 Standard Edition	2.9
		Microsoft Windows Server 2003 for x64	2.9
		Microsoft Windows Server 2008	2.9
		Microsoft Windows Server 2008 R2	2.9
		Microsoft Windows Server 2008 for x64	2.9
		Microsoft Windows Server 2012 Datacenter	2.9
		Microsoft Windows Server 2012 R2 Datacenter	2.9
		Microsoft Windows Server 2012 R2 Std	2.9
		Microsoft Windows Server 2012 Std	2.9
		Microsoft Windows Server 2016	2.9
		Microsoft Windows Server 2019	2.9
		Microsoft Windows Server 2022	2.9
		Microsoft Windows XP Professional	2.9
		Windows 7 Enterprise 32 bit	2.9
		Windows 7 Enterprise x64	2.9
		Windows 7 Home Premium 32 bit	2.9
		Windows 7 Home Premium x64	2.9
		Windows 7 Professional 32 bit	2.9
		Windows 7 Professional x64	2.9
		Windows 7 Ultimate 32 bit	2.9
		Windows 7 Ultimate x64	2.9
		Windows Millennium Edition (Me)	2.9
		Windows Vista	2.9
		Windows Vista for x64	2.9
		64-bit Enabled AIX	2.9
		64-bit Enabled Solaris	2.9
		HP-UX IPF	2.9
		Linux for x64	2.9
		Solaris for x64	2.9

* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.

Type:	Problem Note
Priority:	alert

Date Modified:	2023-02-21 15:38:01
Date Created:	2023-01-26 12:49:46

Support

Problem Note 69836: DataFlux® Data Management Studio and DataFlux® Data Management Server 2.9 contain components with known vulnerabilities

Operating System and Release Information