12Ara
CVE-2023-4932 | SAS Integration Technologies up to 9.4_M8 URL /SASStoredProcess/do _program cross site scripting
A vulnerability was found in SAS Integration Technologies up to 9.4_M8 and classified as problematic. Affected by this issue is some unknown functionality of the file /SASStoredProcess/do of the component URL Handler. The manipulation of the argument _program leads to cross site scripting. This vulnerability is handled as CVE-2023-4932. The attack may be launched remotely. There is no exploit available.