CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2014-5399

SQL injection vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 58.1%

CVSS Severity

CVSS v2 Score 7.5

References

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-238-02.json
https://www.cisa.gov/news-events/ics-advisories/icsa-14-238-02
http://www.securityfocus.com/bid/69416
https://ics-cert.us-cert.gov/advisories/ICSA-14-238-02

Products affected by CVE-2014-5399

Invensys » Wonderware Information Server » Version: 4.0

cpe:2.3:a:invensys:wonderware_information_server:4.0
Invensys » Wonderware Information Server » Version: 4.5

cpe:2.3:a:invensys:wonderware_information_server:4.5
Invensys » Wonderware Information Server » Version: 5.0

cpe:2.3:a:invensys:wonderware_information_server:5.0
Invensys » Wonderware Information Server » Version: 5.5

cpe:2.3:a:invensys:wonderware_information_server:5.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-5399

Products

Pricing

Contact Us