CVE-2007-6763

HIGH 8.8CVE-2007-6763 · Published 31/07/2019 · updated 16/06/2026

In short

CVE-2007-6763 is a HIGH (CVSS 8.8) vulnerability affecting sas drug development (sas).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.9% of all vulnerabilities.
Fix: update to 32drg02 or later.

Package	Affected versions	Patched versions
sas drug development sas	`< 32drg02`	`32drg02`

Description

SAS Drug Development (SDD) before 32DRG02 mishandles logout actions, which allows a user (who was previously logged in) to access resources by pressing a back or forward button in a web browser.

References

ftp.sas.com/techsup/download/hotfix/drugdev/32drg02/SDD_Release_Notes_32DRG02.pdf · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free