Hot Fix Downloads
General Information about Hot Fixes
|A8X001 was replaced by A8X009|
|A8X002 was replaced by A8X009|
|A8X003 was replaced by A8X009|
|A8X004 was replaced by A8X009|
|A8X005 was replaced by A8X009|
|A8X006 was replaced by A8X009|
|A8X007 was replaced by A8X009|
|A8X008 was replaced by A8X009|
|SAS Environment Manager 2.5_M1|
|60408||ALERT - The JCraft and JSch libraries that reside in the SAS® Environment Manager server and agent are vulnerable to directory traversal||A8X001|
|60381||A cross-site scripting vulnerability exists in the SAS® Environment Manager administrative application||A8X002|
|60664||SAS® Environment Manager contains commons-beanutils libraries that are vulnerable to CVE-2014-0114||A8X003|
|60809||A cross-site scripting vulnerability exists in SAS® Environment Manager||A8X004|
|62144||SAS® Environment Manager contains security vulnerabilities (multiple CVEs)||A8X005|
|62511||SAS® Environment Manager contains a stored cross-site scripting vulnerability||A8X007|
|62513||SAS® Environment Manager is vulnerable to jackson-databind vulnerabilities||A8X007|
|62914||SAS® Environment Manager Server is affected by multiple Apache Tomcat vulnerabilities||A8X008|
|62955||SAS® Environment Manager contains vulnerable Apache Struts libraries||A8X008|
|66022||The SAS® Environment Manager Server and Agent do not start, and you see the error "Version number may be negative or greater than 255"||A8X009|
|66144||The SAS® Environment Manager server fails to start after you upgrade the SAS® 9.4 Private Java Runtime Environment||A8X009|
|NOTE: If you install this hot fix and have SAS Environment Manager Agent 2.5_M1 installed, you should also install hot fix A6R006.|
|D indicates that the Documentation has special pre-installation, post-installation or other unique instructions not commonly used for hot fix deployment.|
PLEASE CAREFULLY READ THE TERMS AND CONDITIONS OF THIS LICENSE AGREEMENT ("AGREEMENT") BEFORE DOWNLOADING MATERIALS FROM THIS SITE. BY DOWNLOADING ANY MATERIALS FROM THIS SITE, YOU ARE AGREEING TO THESE TERMS.
You are downloading software code ("Code") which will become part of a product ("Software") you currently have licensed from SAS Institute Inc. or one of its subsidiaries ("the Institute"). this Code is designed to either correct an error in the Software or to add functionality to the Software. The code is governed by the same agreement which governs the Software. If you do not have an existing agreement with the Institute governing the Software, you may not download the Code.
SAS and all other SAS Institute Inc. product or service names are registered trademarks or trademarks of SAS Institute Inc. in the USA and other countries. ® indicates USA registration. Other brand and product names are registered trademarks or trademarks of their respective companies.
Copyright © 2020 SAS Institute Inc. All Rights Reserved.