Severity: High
Description: SAS Environment Manager (on SAS 9.4M8) contains a version of Spring Framework known to be affected by the following:
Potential Impact: Refer to the CVE records for details.