A new update is available for SAS Environment Manager , version 2.5_M4 :
- Hot Fix: J9V006 - Published 21DEC2021 , Download link for J9V006
- Component name: SAS Environment Manager
- Related SAS release: 9.4
Issues addressed in J9V006
| SAS Note 68431 | SAS® Environment Manager contains a cross-site scripting vulnerability (CVE-2021-35475) |
| SAS Note 68637 | SAS® Environment Manager contains a version of Apache Groovy affected by CVE-2020-17521 |
| SAS Note 68638 | SAS® Environment Manager contains a version of the Jasypt library affected by CVE-2014-9970 |
| SAS Note 68648 | SAS® 9.4M7 deployments using SAS Software Depots prior to revision 21w26 encounter an error at the \"SAS Environment Manager Configuration\" step |
| This list of notes might be incomplete. For a complete list of issues addressed by this hot fix, visit the hot fix page for J9V006 |
Note: A comprehensive list of all SAS hot fixes is available from support.sas.com. You can use the SAS Hot Fix Analysis, Download, and Deployment (SASHFADD) tool to manage your SAS hot fixes.
