Skip to content
OpenAdvisories
High · 7.5 CVE-2014-5397 EUVD-2014-5285GHSA-4922-5mj7-g3fq

Schneider Electric Wonderware Cross-site Scripting

Published Aug 28, 2014 · Updated Oct 31, 2025 · Assigned by icscert

Vendor: Schneider Electric Product: Wonderware Information Server Portal Category: ICS / OT

Description

Cross-site scripting (XSS) vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

VendorProductAffectedFixed
Schneider Electric Wonderware Information Server Portal 4.0 SP1, 4.5, 5.0, 5.5 —

Advisories 1

References