SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 71060: SAS® Fraud Management contains XML external entity injection vulnerabilities

DetailsHotfixAboutRate It

Severity: Medium

Description: SAS Fraud Management contains XML external entity injection vulnerabilities.

Potential Impact: XML external entity injection might result in an attack leading to the disclosure of confidential data or denial of service.

Click the Hot Fix tab in this note to access the hot fix for this issue.



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemSAS Fraud ManagementLinux for x646.19.4 TS1M6
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.