PT-2022-28813

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.11 Description The issue is related to a use-after-free condition for aborted TMF sas task in the pm8001 scsi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-28664

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.102 Description The issue is related to a use-after-free condition for aborted TMF sas task in the pm8001 scsi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-28812

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.11 Description The issue is related to a use-after-free condition in the pm8001 scsi driver for aborted SSP/STP sas task. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2022-28726

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.25 Description The issue is related to a use-after-free condition for aborted TMF sas task in the pm8001 scsi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2025-8046

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue occurs in the hisi sas driver when it fails to request the channel IRQ or fatal IRQ, causing the driver to free the IRQ...

Exploit for CVE-2022-25257

CVE-2022-25257 SAS Logon 9.4 allows warning-message injection...

CVE-2022-25256

SAS Web Report Studio 4.4 allows XSS. /SASWebReportStudio/logonAndRender.do has two parameters: saspfsrequestbacklabellist and saspfsrequestbackurllist. The first one affects the content of the button placed in the top left. The second affects the page to which the user is directed after pressing...

CVE-2022-25256

SAS Web Report Studio 4.4 allows XSS. /SASWebReportStudio/logonAndRender.do has two parameters: saspfsrequestbacklabellist and saspfsrequestbackurllist. The first one affects the content of the button placed in the top left. The second affects the page to which the user is directed after pressing...

Cross site scripting

SAS Web Report Studio 4.4 allows XSS. /SASWebReportStudio/logonAndRender.do has two parameters: saspfsrequestbacklabellist and saspfsrequestbackurllist. The first one affects the content of the button placed in the top left. The second affects the page to which the user is directed after pressing...

CVE-2022-25256

SAS Web Report Studio 4.4 allows XSS. /SASWebReportStudio/logonAndRender.do has two parameters: saspfsrequestbacklabellist and saspfsrequestbackurllist. The first one affects the content of the button placed in the top left. The second affects the page to which the user is directed after pressing...

CVE-2022-25256

CVE-2022-25256 affects SAS Web Report Studio 4.4. The flaw is an XSS in /SASWebReportStudio/logonAndRender.do mediated by two parameters, saspfs_request_backlabel_list and saspfs_request_backurl_list. The second parameter can route to a malicious page and can execute JavaScript via a javascript: ...

CVE-2022-25256: Improper Neutralization of Input During Web Page Generation

SAS Web Report Studio 4.4 allows XSS. /SASWebReportStudio/logonAndRender.do has two parameters: saspfsrequestbacklabellist and saspfsrequestbackurllist. The first one affects the content of the button placed in the top left. The second affects the page to which the user is directed after pressing...

Sas Institute Sas Web Report Studio Cross-Site Script Vulnerabilities

Sas Institute Sas Web Report Studio is a web application from Sas Institute, Inc. It is used to view, interact with, create, and distribute public and private reports. A cross-site scripting vulnerability exists in Sas Institute Sas Web Report Studio, which stems from Do having two parameters:...

PT-2022-17178

Name of the Vulnerable Software and Affected Versions SAS Web Report Studio version 4.4 Description SAS Web Report Studio allows cross-site scripting XSS. The "/SASWebReportStudio/logonAndRender.do" endpoint has two parameters: saspfs request backlabel list and saspfs request backurl list. The...

PT-2022-7647

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue may occur in the Linux kernel when a sas task is aborted by the upper layer before handling the I/O completion in mpi ssp completion or mpi sata completion. This...

PT-2022-7457

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a use-after-free vulnerability in the pm8001 component of the Linux kernel. This occurs when a TMF sas task is aborted before handling the IO completion in mpi ss...

CVE-2021-41569

SAS/Intrnet 9.4 build 1520 and earlier allows Local File Inclusion. The samples library included by default in the appstart.sas file, allows end-users of the application to access the sample.webcsf1.sas program, which contains user-controlled macro variables that are passed to the DS2CSF macro...

CVE-2021-41569

SAS/Intrnet 9.4 build 1520 and earlier allows Local File Inclusion. The samples library included by default in the appstart.sas file, allows end-users of the application to access the sample.webcsf1.sas program, which contains user-controlled macro variables that are passed to the DS2CSF macro...

CVE-2021-41569

SAS/Intrnet 9.4 build 1520 and earlier allows Local File Inclusion. The samples library included by default in the appstart.sas file, allows end-users of the application to access the sample.webcsf1.sas program, which contains user-controlled macro variables that are passed to the DS2CSF macro...

Default credentials

SAS/Intrnet 9.4 build 1520 and earlier allows Local File Inclusion. The samples library included by default in the appstart.sas file, allows end-users of the application to access the sample.webcsf1.sas program, which contains user-controlled macro variables that are passed to the DS2CSF macro...