CVEDB API

SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code via a Java deserialization variant.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.043

EPSS Ranking 88.3%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2018-20732

Hpe » Hp-Ux Ipfilter » Version: N/A

cpe:2.3:a:hpe:hp-ux_ipfilter:-
Sas » Web Infrastructure Platform » Version: Any

cpe:2.3:a:sas:web_infrastructure_platform:*
Sas » Web Infrastructure Platform » Version: 9.4

cpe:2.3:a:sas:web_infrastructure_platform:9.4
Ibm » Aix » Version: N/A

cpe:2.3:o:ibm:aix:-
Linux » Linux Kernel » Version: N/A

cpe:2.3:o:linux:linux_kernel:-
Microsoft » Windows » Version: N/A

cpe:2.3:o:microsoft:windows:-
Oracle » Solaris » Version: N/A

cpe:2.3:o:oracle:solaris:-