CVE-2023-4932 Reflected Cross-Site Scripting in SAS 9.4

SAS application is vulnerable to Reflected Cross-Site Scripting XSS. Improper input validation in the program parameter of the the /SASStoredProcess/do endpoint allows arbitrary JavaScript to be executed when specially crafted URL is opened by an authenticated user. The attack is possible from a...

PT-2023-31166

Name of the Vulnerable Software and Affected Versions SAS application versions 9.4 M7 through 9.4 M8 Description The SAS application is vulnerable to Reflected Cross-Site Scripting XSS due to improper input validation in the program parameter of the "/SASStoredProcess/do" endpoint. This allows...

CVE-2023-4932: Improper Neutralization of Input During Web Page Generation

SAS application is vulnerable to Reflected Cross-Site Scripting XSS. Improper input validation in the program parameter of the the /SASStoredProcess/do endpoint allows arbitrary JavaScript to be executed when specially crafted URL is opened by an authenticated user. The attack is possible from a...