CVE-2023-24724

A stored XSS vulnerability was identified in the SAS Admin Console (SAS Web Administration interface, SASAdmin). The issue resides in the user management module, arising from insufficient validation and sanitization of data entered in the user creation and editing forms. Affected product releases...

CVE-2023-24724

A stored cross site scripting XSS vulnerability was discovered in the user management module of the SAS 9.4 Admin Console, due to insufficient validation and sanitization of data input into the user creation and editing form fields. The product name is SAS Web Administration interface SASAdmin. F...