SUPPORT

Select Your Region

Visit the Cary, NC, US corporate headquarters site

Americas

Europe

Middle East & Africa

Asia Pacific

View our worldwide contacts list for help finding your region

Americas

Europe

Middle East & Africa

Asia Pacific

Sign In

Get access to My SAS, trials, communities and more.

Sign Out

Get access to My SAS, trials, communities and more.

SAS Sites

sas.com
Support
Blogs
Communities
Developer
Curiosity
Videos

Documentation

Learn
Brand
PartnerNet
Merchandise
SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 69836: DataFlux® Data Management Studio and DataFlux® Data Management Server 2.9 contain components with known vulnerabilities

DetailsHotfixAboutRate It

Severity: Critical

Description: DataFlux Data Management Studio and DataFlux Data Management Server 2.9 contain components that are affected by the following known vulnerabilities: 

 

Data Management Studio Data Management Server
CVE-2022-23305 CVE-2022-22965
CVE-2022-22965 CVE-2016-1000027
CVE-2020-9493 CVE-2021-22118
CVE-2019-17571 CVE-2022-25647
CVE-2016-1000027 CVE-2021-40690
CVE-2022-23307 CVE-2021-35517
CVE-2022-23302 CVE-2022-42003
CVE-2020-13936 CVE-2022-23596
CVE-2021-22118 CVE-2020-36518
CVE-2022-42004 CVE-2021-36090
CVE-2022-42003 CVE-2021-37714
CVE-2022-25647 CVE-2021-35515
CVE-2022-23596 CVE-2021-35516
CVE-2021-4104 CVE-2022-42004
CVE-2021-40690 CVE-2021-33813
CVE-2021-37714 CVE-2022-23437
CVE-2021-36090 CVE-2022-22971
CVE-2021-35517 CVE-2022-22950
CVE-2021-35516 CVE-2022-36033
CVE-2021-35515 CVE-2021-22569
CVE-2021-33813 CVE-2022-30126
CVE-2021-30468 CVE-2022-25169
CVE-2021-22696 CVE-2022-30973
CVE-2020-36518 CVE-2022-24613
CVE-2022-22971 CVE-2022-24614
CVE-2022-22950 CVE-2022-22970
CVE-2022-36033 CVE-2022-22968
CVE-2022-30973 CVE-2020-13956
CVE-2022-30126 CVE-2021-22060
CVE-2022-25169  CVE-2021-22096
CVE-2022-24614 CVE-2022-33879
CVE-2022-24613  
CVE-2021-31812  
CVE-2021-31811  
CVE-2021-28657  
CVE-2021-27906  
CVE-2021-27807  
CVE-2021-22569  
CVE-2022-22970  
CVE-2022-22968  
CVE-2021-22096  
CVE-2021-22060  
CVE-2022-33879   

 

Potential Impact: Impacts vary. Refer to the CVE records listed in the previous section for details.

Click the Hot Fix tab in this note to access the hot fix for this issue.



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
DatafluxDataFlux Data Management StudioMicrosoft® Windows® for x642.9
Microsoft Windows 8 Enterprise 32-bit2.9
Microsoft Windows 8 Enterprise x642.9
Microsoft Windows 8 Pro 32-bit2.9
Microsoft Windows 8 Pro x642.9
Microsoft Windows 8.1 Enterprise 32-bit2.9
Microsoft Windows 8.1 Enterprise x642.9
Microsoft Windows 8.1 Pro 32-bit2.9
Microsoft Windows 8.1 Pro x642.9
Microsoft Windows 102.9
Microsoft Windows 112.9
Microsoft Windows 95/982.9
Microsoft Windows 2000 Advanced Server2.9
Microsoft Windows 2000 Datacenter Server2.9
Microsoft Windows 2000 Server2.9
Microsoft Windows 2000 Professional2.9
Microsoft Windows NT Workstation2.9
Microsoft Windows Server 2003 Datacenter Edition2.9
Microsoft Windows Server 2003 Enterprise Edition2.9
Microsoft Windows Server 2003 Standard Edition2.9
Microsoft Windows Server 2003 for x642.9
Microsoft Windows Server 20082.9
Microsoft Windows Server 2008 R22.9
Microsoft Windows Server 2008 for x642.9
Microsoft Windows Server 2012 Datacenter2.9
Microsoft Windows Server 2012 R2 Datacenter2.9
Microsoft Windows Server 2012 R2 Std2.9
Microsoft Windows Server 2012 Std2.9
Microsoft Windows Server 20162.9
Microsoft Windows Server 20192.9
Microsoft Windows Server 20222.9
Microsoft Windows XP Professional2.9
Windows 7 Enterprise 32 bit2.9
Windows 7 Enterprise x642.9
Windows 7 Home Premium 32 bit2.9
Windows 7 Home Premium x642.9
Windows 7 Professional 32 bit2.9
Windows 7 Professional x642.9
Windows 7 Ultimate 32 bit2.9
Windows 7 Ultimate x642.9
Windows Millennium Edition (Me)2.9
Windows Vista2.9
Windows Vista for x642.9
DatafluxDataFlux Data Management ServerMicrosoft® Windows® for x642.9
Microsoft Windows 8 Enterprise 32-bit2.9
Microsoft Windows 8 Enterprise x642.9
Microsoft Windows 8 Pro 32-bit2.9
Microsoft Windows 8 Pro x642.9
Microsoft Windows 8.1 Enterprise 32-bit2.9
Microsoft Windows 8.1 Enterprise x642.9
Microsoft Windows 8.1 Pro 32-bit2.9
Microsoft Windows 8.1 Pro x642.9
Microsoft Windows 102.9
Microsoft Windows 112.9
Microsoft Windows 95/982.9
Microsoft Windows 2000 Advanced Server2.9
Microsoft Windows 2000 Datacenter Server2.9
Microsoft Windows 2000 Server2.9
Microsoft Windows 2000 Professional2.9
Microsoft Windows NT Workstation2.9
Microsoft Windows Server 2003 Datacenter Edition2.9
Microsoft Windows Server 2003 Enterprise Edition2.9
Microsoft Windows Server 2003 Standard Edition2.9
Microsoft Windows Server 2003 for x642.9
Microsoft Windows Server 20082.9
Microsoft Windows Server 2008 R22.9
Microsoft Windows Server 2008 for x642.9
Microsoft Windows Server 2012 Datacenter2.9
Microsoft Windows Server 2012 R2 Datacenter2.9
Microsoft Windows Server 2012 R2 Std2.9
Microsoft Windows Server 2012 Std2.9
Microsoft Windows Server 20162.9
Microsoft Windows Server 20192.9
Microsoft Windows Server 20222.9
Microsoft Windows XP Professional2.9
Windows 7 Enterprise 32 bit2.9
Windows 7 Enterprise x642.9
Windows 7 Home Premium 32 bit2.9
Windows 7 Home Premium x642.9
Windows 7 Professional 32 bit2.9
Windows 7 Professional x642.9
Windows 7 Ultimate 32 bit2.9
Windows 7 Ultimate x642.9
Windows Millennium Edition (Me)2.9
Windows Vista2.9
Windows Vista for x642.9
64-bit Enabled AIX2.9
64-bit Enabled Solaris2.9
HP-UX IPF2.9
Linux for x642.9
Solaris for x642.9
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.