EUVD-2018-13278

Malware in sbrugna...

EUVD-2018-13277

Malware in sbrugna...

EUVD-2015-9123

Malware in sbrugna...

CVE-2018-20733

BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE...

CVE-2018-20732

SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code via a Java deserialization variant...

Deserialization of untrusted data

SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code via a Java deserialization variant...

Design/Logic Flaw

BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE...

Cross site scripting

Logon Manager in SAS Web Infrastructure Platform before 9.4M3 allows reflected XSS on the Timeout page...

CVE-2018-20733

BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE...

CVE-2018-20732

SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code via a Java deserialization variant...

CVE-2018-20733

BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE...

CVE-2015-9281

CVE-2015-9281 concerns the Logon Manager in SAS Web Infrastructure Platform (pre-9.4M3). The vulnerability is a reflected XSS on the Timeout page, caused by insufficient input sanitization on that page. Affected component: Logon Manager’s web UI; the issue is triggered when processing user-contro...

CVE-2015-9281

Logon Manager in SAS Web Infrastructure Platform before 9.4M3 allows reflected XSS on the Timeout page...

PT-2019-10191

Name of the Vulnerable Software and Affected Versions: SAS Web Infrastructure Platform versions prior to 9.4M6 Description: The issue allows remote attackers to execute arbitrary code via a Java deserialization variant. Recommendations: For versions prior to 9.4M6, update to version 9.4M6 or late...

PT-2019-10192

Name of the Vulnerable Software and Affected Versions: SAS Web Infrastructure Platform versions prior to 9.4M6 Description: The issue affects BI Web Services in SAS Web Infrastructure Platform, allowing XXE XML External Entity attacks. Recommendations: For versions prior to 9.4M6, update to versi...

CVE-2015-9281: Improper Neutralization of Input During Web Page Generation

Logon Manager in SAS Web Infrastructure Platform before 9.4M3 allows reflected XSS on the Timeout page...

CVE-2018-20732: Deserialization of Untrusted Data

SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code via a Java deserialization variant...

CVE-2018-20733: Improper Restriction of XML External Entity Reference

BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE...

PT-2019-7241

Name of the Vulnerable Software and Affected Versions SAS Web Infrastructure Platform versions prior to 9.4M3 Description The issue allows for reflected XSS on the Timeout page. This occurs due to a flaw in the Logon Manager component. Recommendations For versions prior to 9.4M3, update to versio...