CVE-2014-5397 — Schneider Electric Wonderware Cross-site Scripting

CVE-2014-5397

Schneider Electric Wonderware Cross-site Scripting PUBLISHED

Description (CNA)

Cross-site scripting (XSS) vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / Wonderware Information Server Portal	affected 4.0 SP1; affected 4.5; affected 5.0; affected 5.5

CWE

CWE-79

References

https://www.cisa.gov/news-events/ics-advisories/icsa-14-238-02
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-238-02.json

ADP enrichment

CVE

No English description supplied.

https://ics-cert.us-cert.gov/advisories/ICSA-14-238-02
http://www.securityfocus.com/bid/69418