SUPPORT

Select Your Region

Visit the Cary, NC, US corporate headquarters site

Americas

Europe

Middle East & Africa

Asia Pacific

View our worldwide contacts list for help finding your region

Americas

Europe

Middle East & Africa

Asia Pacific

Sign In

Get access to My SAS, trials, communities and more.

Sign Out

Get access to My SAS, trials, communities and more.

SAS Sites

sas.com
Support
Blogs
Communities
Developer
Curiosity
Videos

Documentation

Learn
Brand
PartnerNet
Merchandise
SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 70426: SAS® Web Report Studio contains a stored cross-site scripting vulnerability

DetailsHotfixAboutRate It

Severity: High

Description: SAS Web Report Studio contains a stored cross-site scripting vulnerability.

Potential Impact: Users might unknowingly execute malicious code.

Click the Hot Fix tab in this note to access the hot fix for this issue.



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemSAS Web Report StudioMicrosoft® Windows® for x644.4_M74.4_M89.4 TS1M79.4 TS1M8
64-bit Enabled AIX4.4_M74.4_M89.4 TS1M79.4 TS1M8
64-bit Enabled Solaris4.4_M74.4_M89.4 TS1M79.4 TS1M8
HP-UX IPF4.4_M74.4_M89.4 TS1M79.4 TS1M8
Linux for x644.4_M74.4_M89.4 TS1M79.4 TS1M8
Solaris for x644.4_M74.4_M89.4 TS1M79.4 TS1M8
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.