Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 to 5.5 vulnerabilities
3 known CVE vulnerabilities in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 to 5.5, translated and rated.
- CVE-2014-5399High
CVE-2014-5399 is an SQL injection vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal versions 4.0 SP1 through 5.5 that allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
- CVE-2014-5397High
The XSS vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal versions 4.0 SP1 through 5.5 allows remote attackers to inject arbitrary web scripts or HTML via unspecified vectors.
- CVE-2014-2380High
Schneider Electric Wonderware Information Server (WIS) Portal versions 4.0 SP1 through 5.5 uses weak encryption, allowing remote attackers to obtain sensitive information by reading a credential file.