CVE-2014-5399

CVE-2014-5399: Schneider Electric Wonderware SQL Injection

Vendor Schneider Electric
Product Wonderware Information Server Portal
Weakness CWE-89 · SQLi
Published August 28, 2014
Last update October 31, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

SQL injection vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Key dates

02Disclosure timeline

August 28, 2014 CVE published
October 31, 2025 Record updated