VendorsSASweb_infrastructure_platform9.4
Vulnerabilities

SAS Web Infrastructure Platform 9.4

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2018-20732
SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code via a Java deserialization variant.
Published 2019-01-17 · Modified
9.8EPSS 0.040
CVE-2018-20733
BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE.
Published 2019-01-17 · Modified
7.5EPSS 0.011
CVE-2015-9281
Logon Manager in SAS Web Infrastructure Platform before 9.4M3 allows reflected XSS on the Timeout page.
Published 2019-01-17 · Modified
6.1EPSS 0.006