Description
Cross-site scripting (XSS) vulnerability in Invensys Wonderware Information Server 4.0 SP1 and 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Advisories 1
- ICSA-12-062-01 Wonderware Information Server Multiple Vulnerabilities CISA ICS & IT advisories · Jun 17, 2025
References
- 1026886 vdb-entry
- 48603 third-party-advisory
- 52851 vdb-entry
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-062-01.pdf
- 1026887 vdb-entry
- wis-unspecified-xss(74549) vdb-entry
- 80888 vdb-entry