CVE-2021-35475

SAS Environment Manager 2.5 allows XSS through the Name field when creating/editing a server

published June 25, 2021

CVSS
—
EPSS
1%
Percentile
60.7
In the wild
Unconfirmed
What it is

SAS Environment Manager 2.5 allows XSS through the Name field when creating/editing a server. The XSS will prompt when editing the Configuration Properties.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00945 · 60.7th percentile
Published
2021-06-25T10:01Z
EPSS history
Timeline
  • 25 JUN 10:01Z
    SAS Environment Manager 2.5 allows XSS through the Name field when creating/editing a server
    cvelistv5