VendorsInvensyswonderware_information_server4.5
Vulnerabilities

Invensys Wonderware Information Server 4.5

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

12CVEs
CVE-2013-0685
Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal does not restrict unspecified size and amount values, which allows remote attackers to execute arbitrary code or cause a denial of service (resource consumption) via unknown vectors.
Published 2013-05-09 · Modified
9.3EPSS 0.033
CVE-2013-0686
Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Published 2013-05-09 · Modified
9.3EPSS 0.021
CVE-2014-2380
Schneider Electric Wonderware Inadequate Encryption Strength
Published 2014-08-28 · Modified
7.8EPSS 0.008
CVE-2012-0228
Invensys Wonderware Information Server 4.0 SP1 and 4.5 does not properly implement client controls, which allows remote attackers to bypass intended access restrictions via unspecified vectors.
Published 2012-04-02 · Modified
7.5EPSS 0.022
CVE-2012-0226
SQL injection vulnerability in Invensys Wonderware Information Server 4.0 SP1 and 4.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Published 2012-04-02 · Modified
7.5EPSS 0.017
CVE-2014-5399
Schneider Electric Wonderware SQL Injection
Published 2014-08-28 · Modified
7.5EPSS 0.016
CVE-2014-5397
Schneider Electric Wonderware Cross-site Scripting
Published 2014-08-28 · Modified
7.5EPSS 0.015
CVE-2013-0684
SQL injection vulnerability in Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Published 2013-05-09 · Modified
7.5EPSS 0.013
CVE-2012-0225
Cross-site scripting (XSS) vulnerability in Invensys Wonderware Information Server 4.0 SP1 and 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published 2012-04-02 · Modified
4.3EPSS 0.015
CVE-2013-0688
Cross-site scripting (XSS) vulnerability in Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published 2013-05-09 · Modified
4.3EPSS 0.010
CVE-2014-5398
Schneider Electric Wonderware Input Validation
Published 2014-08-28 · Modified
2.1EPSS 0.006
CVE-2014-2381
Schneider Electric Wonderware Inadequate Encryption Strength
Published 2014-08-28 · Modified
2.1EPSS 0.001