CVE-2018-20733

BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE...

Cross site scripting

Logon Manager in SAS Web Infrastructure Platform before 9.4M3 allows reflected XSS on the Timeout page...

CVE-2018-20732

SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code via a Java deserialization variant...

CVE-2018-20733

The vulnerability CVE-2018-20733 affects SAS Web Infrastructure Platform’s BI Web Services prior to 9.4M6. The root issue is an XML External Entity (XXE) exposure within BI Web Services, potentially impacting confidentiality as indicated by CVSS metrics (C: Partial, A: None, I: None for CVSS2; C:...

CVE-2018-20733

BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE...

CVE-2015-9281

CVE-2015-9281 concerns the Logon Manager in SAS Web Infrastructure Platform (pre-9.4M3). The vulnerability is a reflected XSS on the Timeout page, caused by insufficient input sanitization on that page. Affected component: Logon Manager’s web UI; the issue is triggered when processing user-contro...