CVE-2013-0688

Cross-site scripting (XSS) vulnerability in Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
Link Resource
http://ics-cert.us-cert.gov/advisories/ICSA-13-113-01 US Government Resource
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:invensys:wonderware_information_server:5.0:-:portal:*:*:*:*:*
cpe:2.3:a:invensys:wonderware_information_server:4.5:-:portal:*:*:*:*:*
cpe:2.3:a:invensys:wonderware_information_server:4.0:sp1sp1:*:*:*:*:*:*

Information

Published : 2013-05-09 05:31

Updated : 2013-05-09 05:31


NVD link : CVE-2013-0688

Mitre link : CVE-2013-0688


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

invensys

  • wonderware_information_server