https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2014-5399.htmlhttps://patchthecve.com/cve/CVE-2014-5399.htmlWed, 17 Jun 2026 00:11:29 +0000HIGH 7.5: SQL injection vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.https://patchthecve.com/cve/CVE-2014-5398.htmlhttps://patchthecve.com/cve/CVE-2014-5398.htmlWed, 17 Jun 2026 00:11:29 +0000LOW 2.1: Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to read arbitrary files or cause a denial of service via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.https://patchthecve.com/cve/CVE-2014-5397.htmlhttps://patchthecve.com/cve/CVE-2014-5397.htmlWed, 17 Jun 2026 00:11:29 +0000HIGH 7.5: Cross-site scripting (XSS) vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.https://patchthecve.com/cve/CVE-2014-2381.htmlhttps://patchthecve.com/cve/CVE-2014-2381.htmlWed, 17 Jun 2026 00:06:30 +0000LOW 2.1: Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows local users to obtain sensitive information by reading a credential file.https://patchthecve.com/cve/CVE-2014-2380.htmlhttps://patchthecve.com/cve/CVE-2014-2380.htmlWed, 17 Jun 2026 00:06:30 +0000HIGH 7.8: Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows remote attackers to obtain sensitive information by reading a credential file.https://patchthecve.com/cve/CVE-2013-0688.htmlhttps://patchthecve.com/cve/CVE-2013-0688.htmlTue, 16 Jun 2026 23:49:54 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.https://patchthecve.com/cve/CVE-2013-0686.htmlhttps://patchthecve.com/cve/CVE-2013-0686.htmlTue, 16 Jun 2026 23:49:54 +0000HIGH 9.3: Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via an XML document containing an external entity declaration in cohttps://patchthecve.com/cve/CVE-2013-0685.htmlhttps://patchthecve.com/cve/CVE-2013-0685.htmlTue, 16 Jun 2026 23:49:54 +0000HIGH 9.3: Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal does not restrict unspecified size and amount values, which allows remote attackers to execute arbitrary code or cause a denial of service (resource consumption) via unknown vectors.https://patchthecve.com/cve/CVE-2013-0684.htmlhttps://patchthecve.com/cve/CVE-2013-0684.htmlTue, 16 Jun 2026 23:49:53 +0000HIGH 7.5: SQL injection vulnerability in Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5- Portal, and 5.0- Portal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.https://patchthecve.com/cve/CVE-2012-0228.htmlhttps://patchthecve.com/cve/CVE-2012-0228.htmlTue, 16 Jun 2026 23:36:56 +0000HIGH 7.5: Invensys Wonderware Information Server 4.0 SP1 and 4.5 does not properly implement client controls, which allows remote attackers to bypass intended access restrictions via unspecified vectors.https://patchthecve.com/cve/CVE-2012-0226.htmlhttps://patchthecve.com/cve/CVE-2012-0226.htmlTue, 16 Jun 2026 23:36:56 +0000HIGH 7.5: SQL injection vulnerability in Invensys Wonderware Information Server 4.0 SP1 and 4.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.https://patchthecve.com/cve/CVE-2012-0225.htmlhttps://patchthecve.com/cve/CVE-2012-0225.htmlTue, 16 Jun 2026 23:36:56 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in Invensys Wonderware Information Server 4.0 SP1 and 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.https://patchthecve.com/cve/CVE-2011-2962.htmlhttps://patchthecve.com/cve/CVE-2011-2962.htmlTue, 16 Jun 2026 23:32:20 +0000HIGH 9.3: Multiple stack-based buffer overflows in Invensys Wonderware Information Server 3.1, 4.0, and 4.0 SP1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via two unspecified ActiveX controls.