2.1
Non notée
CVE-2014-5398 Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to read…
Description
Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to read arbitrary files or cause a denial of service via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Wonderware Information Server Portal | 5.5 | Pas de correctif indiqué |
| Wonderware Information Server Portal | 5.0 | Pas de correctif indiqué |
| Wonderware Information Server Portal | 4.5 | Pas de correctif indiqué |
Autres CVE de Wonderware Information Server Portal
Les 5 CVE de Wonderware Information Server Portal →
CVE-2014-2380
Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows…
7.8
Non notée
CVE-2014-2381
Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows…
2.1
Non notée
CVE-2014-5399
SQL injection vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5…
7.5
Non notée
CVE-2014-5397
Cross-site scripting (XSS) vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1…
7.5
Non notée