CVE-2018-20732

SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code via a Java deserialization variant.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-01-17

Last modified

2024-08-05

Weaknesses

CWE-502

Affected products

• Web Infrastructure Platform (Sas)

References

• http://www.securityfocus.com/bid/106648
• https://support.sas.com/kb/63/391.html