Wonderware Information Server Security Vulnerabilities and Issues — Wonderware Information Server CVE List

Lucene search

InvensysWonderware Information Server

6 matches found

CVE•added 2012/07/26 10:41 a.m.•47 views

CVE-2012-3005

Untrusted search path vulnerability in Invensys Wonderware InTouch 2012 and earlier, as used in Wonderware Application Server, Wonderware Information Server, Foxboro Control Software, InFusion CE/FE/SCADA, InBatch, and Wonderware Historian, allows local users to gain privileges via a Trojan horse D...

6.9CVSS6.8AI score0.00074EPSS

CVE•added 2012/04/02 8:55 p.m.•42 views

CVE-2012-0258

Heap-based buffer overflow in the WWCabFile ActiveX component in the Wonderware System Platform in Invensys Wonderware Application Server 2012 and earlier, Foxboro Control Software 3.1 and earlier, InFusion CE/FE/SCADA 2.5 and earlier, Wonderware Information Server 4.5 and earlier, ArchestrA Applic...

6.8CVSS8.3AI score0.03138EPSS

CVE•added 2012/04/02 8:55 p.m.•38 views

CVE-2012-0226

SQL injection vulnerability in Invensys Wonderware Information Server 4.0 SP1 and 4.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

7.5CVSS8.6AI score0.00522EPSS

CVE•added 2012/04/02 8:55 p.m.•38 views

CVE-2012-0257

6.8CVSS8.3AI score0.03138EPSS

CVE•added 2012/04/02 8:55 p.m.•36 views

CVE-2012-0225

Cross-site scripting (XSS) vulnerability in Invensys Wonderware Information Server 4.0 SP1 and 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3CVSS5.8AI score0.00535EPSS

CVE•added 2012/04/02 8:55 p.m.•34 views

CVE-2012-0228

Invensys Wonderware Information Server 4.0 SP1 and 4.5 does not properly implement client controls, which allows remote attackers to bypass intended access restrictions via unspecified vectors.

7.5CVSS6.9AI score0.00563EPSS