CVE-2014-5397

N/A Unknown
Published: August 28, 2014 Modified: November 01, 2025
View on NVD

Description

Cross-site scripting (XSS) vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-238-02.json
Source: ics-cert@hq.dhs.gov
https://www.cisa.gov/news-events/ics-advisories/icsa-14-238-02
Source: ics-cert@hq.dhs.gov
http://www.securityfocus.com/bid/69418
Source: af854a3a-2127-422b-91ae-364da2661108
https://ics-cert.us-cert.gov/advisories/ICSA-14-238-02
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource

4 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
0.4%
60th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-79 CWE-79

Affected Vendors

invensys

Related CVEs

CVE-2025-52691 10.0
CVE-2025-15168 7.3
CVE-2025-15167 7.3
CVE-2025-15166 7.3
CVE-2025-15165 7.3