CVE-2014-5398

CVE-2014-5398: Schneider Electric Wonderware Input Validation

Vendor Schneider Electric
Product Wonderware Information Server Portal
Weakness CWE-20 · Input validation
Published August 28, 2014
Last update October 31, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to read arbitrary files or cause a denial of service via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Key dates

02Disclosure timeline

August 28, 2014 CVE published
October 31, 2025 Record updated