CVE-2014-5454: Sas Visual Analytics

Medium severity, CVSS 6.0. EPSS: 2.4% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in the image upload module in SAS Visual Analytics 6.4M1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors.

Affected products

• Sas Visual Analytics: version 6.4 only

Published 2014-08-25. Last modified 2026-06-17.