Vendor

    SAS Institute

    18 known vulnerabilities in products by SAS Institute, 0 of them actively exploited (CISA KEV).

    Key figures

    18

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in SAS Institute
    CriticalCVE-2018-20732

    SAS Web Infrastructure Platform: Deserialization of Untrusted Data

    		9.8
    CriticalCVE-2019-14678

    SAS XML Mapper: XML External Entity (XXE)

    		10.0
    HighCVE-2021-41569

    Sas\/intrnet: File Inclusion

    		7.5
    HighCVE-2007-6763

    SAS Institute SAS Drug Development: security vulnerability

    		8.8
    HighCVE-2020-7667

    Arbitrary File Write via Archive Extraction (Zip Slip)

    also in 1 other product

    		7.5
    HighCVE-2018-20733

    SAS Web Infrastructure Platform: XML External Entity (XXE)

    		7.5
    MediumCVE-2022-25256

    Sas Web Report Studio: Cross-Site Scripting (XSS)

    		6.1
    Not ratedCVE-2014-2262

    SAS Base SAS: Buffer Overflow

    		—
    Not ratedCVE-2002-2017

    Sas Base: Code Execution

    		—
    MediumCVE-2021-35475

    Sas Environment Manager: Cross-Site Scripting (XSS)

    		5.4
    Not ratedCVE-2014-5454

    SAS Visual Analytics: Unrestricted File Upload

    		—
    MediumCVE-2023-4932

    Reflected Cross-Site Scripting in SAS 9.4

    also in 1 other product

    		6.3
    MediumCVE-2015-9281

    SAS Web Infrastructure Platform: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2023-24724

    Sas Web Administration Interface: Cross-Site Scripting (XSS)

    		5.4
    MediumCVE-2020-9350

    SAS Visual Analytics: Cross-Site Scripting (XSS)

    		5.4
    Not ratedCVE-2002-0219

    Sas Base: Buffer Overflow

    		—
    Not ratedCVE-2002-0218

    Sas Base: Format String

    		—
    Not ratedCVE-2002-2018

    Sas Base: Privilege Escalation

    		—

    Products

    Products by SAS Institute
    SAS Integration Technologies30
    SAS Web Infrastructure Platform30