CVE-2007-6763: Sas Drug Development

High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days.

SAS Drug Development (SDD) before 32DRG02 mishandles logout actions, which allows a user (who was previously logged in) to access resources by pressing a back or forward button in a web browser.

Affected products

• Sas Sas Drug Development: before 32drg02 (fixed in 32drg02)

Published 2019-07-31. Last modified 2026-06-16.