Wonderware Information Server Security Vulnerabilities and Issues — Wonderware Information Server CVE List

Lucene search

InvensysWonderware Information Server

4 matches found

CVE•added 2013/05/09 12:31 p.m.•40 views

CVE-2013-0688

Cross-site scripting (XSS) vulnerability in Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3CVSS5.8AI score0.00249EPSS

CVE•added 2013/05/09 12:31 p.m.•39 views

CVE-2013-0684

SQL injection vulnerability in Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

7.5CVSS8.6AI score0.00222EPSS

CVE•added 2013/05/09 12:31 p.m.•32 views

CVE-2013-0686

Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML document containing an external entity declaration in c...

9.3CVSS7.1AI score0.00455EPSS

CVE•added 2013/05/09 12:31 p.m.•31 views

CVE-2013-0685

Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal does not restrict unspecified size and amount values, which allows remote attackers to execute arbitrary code or cause a denial of service (resource consumption) via unknown vectors.

9.3CVSS8.1AI score0.02476EPSS