CVE-2014-5397

HIGH · 7.5 CVSS Gepubliceerd: 28-08-2014 CWE-79

Beschrijving NL

Cross-site scripting (XSS) -kwetsbaarheid in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 tot en met 5.5 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via niet-gespecificeerde vectoren.

Origineel (Engels) tonen

Cross-site scripting (XSS) vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Vendors

Invensys

Affected products

Wonderware Information Server

References

github.com
www.cisa.gov
www.securityfocus.com
ics-cert.us-cert.gov