Base Sas

Vendor:

First CVE: Mar 1, 2014 · Active for 12 years

2

Total CVEs

More Total CVEs than 49% of tracked products

1.0

Avg CVEs / Year

Bottom 1%

9.7

Avg CVSS

Higher Avg CVSS than 87% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Base Sas over time

Volume of CVEsAvg CVSS Base Score

First CVE

Mar 1, 2014

12 years ago

Most Recent CVE

Nov 14, 2019

2,446 days ago

CVE Severity & Scoring

Base Sas2 CVEs

50%

All CVEs352,719 CVEs

45%

40%

11%

HighCritical

Attack Vector

Local0 (0.0%)

Network1 (50.0%)

Unknown1 (50.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low1 (50.0%)

High0 (0.0%)

Unknown1 (50.0%)

User Interaction

None1 (50.0%)

Unknown1 (50.0%)

Required0 (0.0%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None1 (50.0%)

Unknown1 (50.0%)

Top CVEs

Signals from CVEs in this product scope (2 CVEs).

2 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2019-14678CRITICAL SAS XML Mapper 9.45 has an XML External Entity (XXE) vulnerability that can be leveraged by malicious attackers in multiple ways. Examples are Local File Reading, Out Of Band File	Nov 14, 2019	10.0	30	NO	NO
CVE-2014-2262HIGH Buffer overflow in the client application in Base SAS 9.2 TS2M3, SAS 9.3 TS1M1 and TS1M2, and SAS 9.4 TS1M0 allows user-assisted remote attackers to execute arbitrary code via a cr	Mar 1, 2014	9.3	24	NO	NO

View all 2 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (2 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

0 CVEs

0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (2 CVEs).

Media Mentions

Signals from CVEs in this product scope (2 CVEs).

Top CNAs Publishing CVEs For Base Sas

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS
9.4	2	9.7	3.6%
9.3	1	9.3	4.3%
9.2	1	9.3	4.3%