SAS® Deployment Agent contains third-party libraries with known vulnerabilities in SAS® 9.4M9 (TS1M9)


Severity: High

Description: SAS® Deployment Agent contains versions of LOGBACK and LOG4J jars with the following known vulnerabilities:

​​​​​​Potential Impact: See the CVE records for additional information.