SAS Institute Inc. Known Exploited Vulnerabilities

Evidence-backed KEV intelligence for SAS Institute Inc. products — CISA KEV status, confidence, sensor telemetry, and virtual-patch availability.

Total KEVs

1

In CISA KEV

0

Beyond CISA KEV

1

Sensor Observed

0

Virtual Patch Available

0

SAS Institute Inc. KEVs Added by Year

Loading...

1 SAS Institute Inc. KEV added all time (primary attestation date).

Attested CVEs

CVE Confidence CISA KEV Added
CVE-2021-41569

SAS/Intrnet 9.4 build 1520 and earlier allows Local File Inclusion. The samples library (included by default) in the appstart.sas file, allows...

High Not in CISA 07 Jun 2026

Common Vulnerability Classes (CWE)

  • CWE-829 — Inclusion of Functionality from Untrusted Control Sphere 1

Browse all known exploited vulnerabilities · What is a known exploited vulnerability? · Methodology