6
CVE-2014-5454
- EPSS 2.35%
- Veröffentlicht 25.08.2014 16:55:04
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Erkennungen
LoginUnrestricted file upload vulnerability in the image upload module in SAS Visual Analytics 6.4M1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sas ≫ Visual Analytics Version 6.4 Update m1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.35% | 0.815 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 6 | 6.8 | 6.4 |
AV:N/AC:M/Au:S/C:P/I:P/A:P
|
http://packetstormsecurity.com/files/127866/SAS-Visual-Analytics-6.4M1-Arbitrary-File-Upload.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/95351