A new update is available for SAS Environment Manager , version 2.5_M5 :
SAS Note 70945 | SAS® Web Application Server contains Apache Tomcat version 9.0.86, which is affected by CVE-2024-34750 |
KB0041361 | SAS® 9.4M8 contains a version of Spring Framework known to be affected by CVE-2024-38820 and CVE-2024-38819 |
This list of notes might be incomplete. For a complete list of issues addressed by this hot fix, visit the hot fix page for M2T009 |
Note: A comprehensive list of all SAS hot fixes is available from support.sas.com. You can use the SAS Hot Fix Analysis, Download, and Deployment (SASHFADD) tool to manage your SAS hot fixes.