Approved changes feed: RSS · Atom

cpe:2.3:a:invensys:wonderware_information_server:4.5:*:*:*:*:*:*:*

part: a version: 4.5 update: *

VendorInvensys (71736450-6408-5b87-8efb-79f5d5ed779e)
ProductWonderware Information Server (77ef1dcf-b77c-57f6-872e-cf61f43cce22)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-0228 vulnerable 2026-06-03 14:31:35.004956 Details available
Invensys Wonderware Information Server 4.0 SP1 and 4.5 does not properly implement client controls, which allows remote attackers to bypass intended access restrictions via unspecified vectors.
Published: 2012-04-02T20:00:00.000Z
Updated: 2024-08-06T18:16:19.903Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0226 vulnerable 2026-06-03 14:31:35.001438 Details available
SQL injection vulnerability in Invensys Wonderware Information Server 4.0 SP1 and 4.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Published: 2012-04-02T20:00:00.000Z
Updated: 2024-08-06T18:16:19.676Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0225 vulnerable 2026-06-03 14:31:35.000984 Details available
Cross-site scripting (XSS) vulnerability in Invensys Wonderware Information Server 4.0 SP1 and 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2012-04-02T20:00:00.000Z
Updated: 2024-08-06T18:16:19.763Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.