CVE-1999-1325

HIGH 7.2CVE-1999-1325 · Published 31/12/1999 · updated 16/06/2026

In short

CVE-1999-1325 is a HIGH (CVSS 7.2) vulnerability affecting sas system (vax vms).
Chance of exploitation in the next 30 days (EPSS): 0.33%, higher than 26.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sas system vax_vms	`= 5.18`	No fix yet

SAS System 5.18 on VAX/VMS is installed with insecure permissions for its directories and startup file, which allows local users to gain privileges.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.