Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
InvensysWonderware Information Server4.5

12 matches found

CVE
CVE•added 2013/05/09 12:31 p.m.•39 views

CVE-2013-0684

SQL injection vulnerability in Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

7.5CVSS8.6AI score0.00222EPSS
CVE
CVE•added 2013/05/09 12:31 p.m.•39 views

CVE-2013-0688

Cross-site scripting (XSS) vulnerability in Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3CVSS5.8AI score0.00249EPSS
CVE
CVE•added 2012/04/02 8:55 p.m.•38 views

CVE-2012-0226

SQL injection vulnerability in Invensys Wonderware Information Server 4.0 SP1 and 4.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

7.5CVSS8.6AI score0.00522EPSS
CVE
CVE•added 2014/08/28 1:55 a.m.•37 views

CVE-2014-2381

Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows local users to obtain sensitive information by reading a credential file.

2.1CVSS5.9AI score0.00032EPSS
CVE
CVE•added 2012/04/02 8:55 p.m.•36 views

CVE-2012-0225

Cross-site scripting (XSS) vulnerability in Invensys Wonderware Information Server 4.0 SP1 and 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3CVSS5.8AI score0.00535EPSS
CVE
CVE•added 2014/08/28 1:55 a.m.•36 views

CVE-2014-5398

Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to read arbitrary files or cause a denial of service via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

2.1CVSS7AI score0.00114EPSS
CVE
CVE•added 2012/04/02 8:55 p.m.•34 views

CVE-2012-0228

Invensys Wonderware Information Server 4.0 SP1 and 4.5 does not properly implement client controls, which allows remote attackers to bypass intended access restrictions via unspecified vectors.

7.5CVSS6.9AI score0.00563EPSS
CVE
CVE•added 2013/05/09 12:31 p.m.•32 views

CVE-2013-0686

Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML document containing an external entity declaration in c...

9.3CVSS7.1AI score0.00455EPSS
CVE
CVE•added 2014/08/28 1:55 a.m.•32 views

CVE-2014-2380

Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows remote attackers to obtain sensitive information by reading a credential file.

7.8CVSS6.3AI score0.00148EPSS
CVE
CVE•added 2014/08/28 1:55 a.m.•32 views

CVE-2014-5397

Cross-site scripting (XSS) vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3CVSS5.8AI score0.00249EPSS
CVE
CVE•added 2013/05/09 12:31 p.m.•31 views

CVE-2013-0685

Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal does not restrict unspecified size and amount values, which allows remote attackers to execute arbitrary code or cause a denial of service (resource consumption) via unknown vectors.

9.3CVSS8.1AI score0.02476EPSS
CVE
CVE•added 2014/08/28 1:55 a.m.•31 views

CVE-2014-5399

SQL injection vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

7.5CVSS8.6AI score0.00215EPSS