PT-2019-7241 · Sas · Sas Web Infrastructure Platform

Published 2019-01-17 · Updated 2019-01-24 · CVE-2015-9281

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SAS Web Infrastructure Platform versions prior to 9.4M3

Description The issue allows for reflected XSS on the Timeout page. This occurs due to a flaw in the Logon Manager component.

Recommendations For versions prior to 9.4M3, update to version 9.4M3 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2015-9281

Affected Products

Sas Web Infrastructure Platform

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2015-9281 · Security Note
• http://support.sas.com/kb/55/537.html · Vendor Advisory