VendorsSASintegration_technologiesall versions
Vulnerabilities

SAS Integration Technologies 9.4

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2002-2017
sastcpd in SAS/Base 8.0 allows local users to execute arbitrary code by setting the authprog environment variable to reference a malicious program, which is then executed by sastcpd.
Published 2005-07-14 · Modified
10.0EPSS 0.025
CVE-2002-2018
sastcpd in SAS/Base 8.0 might allow local users to gain privileges by setting the netencralg environment variable, which causes a segmentation fault.
Published 2005-07-14 · Modified
7.2EPSS 0.003
CVE-2023-4932
Reflected Cross-Site Scripting in SAS 9.4
Published 2023-12-12 · Modified
6.3EPSS 0.006