Severity: Medium

Description: SAS Forecast Analyst Workbench and SAS Merchandise Intelligence contain commons_httpclient 3.1.0.0, which is known to be affected by CVE-2012-5783 and CVE-2012-6153.

Potential Impact: See the CVE records for details.