Lucene search
SasWeb Infrastructure Platform
3 matches found
CVE-2015-9281
Logon Manager in SAS Web Infrastructure Platform before 9.4M3 allows reflected XSS on the Timeout page.
6.1CVSS5.9AI score0.00301EPSS
CVE-2018-20732
SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code via a Java deserialization variant.
9.8CVSS9.7AI score0.04279EPSS
CVE-2018-20733
BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE.
7.5CVSS7.5AI score0.00276EPSS