CVE-2014-5408

CVE-2014-5408: Nordex NC2 Cross-site Scripting

Vendor Nordex

Product Nordex Control 2 (NC2) SCADA

Weakness CWE-79 · XSS

Published November 5, 2014

Last update November 3, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Cross-site scripting (XSS) vulnerability in the login script in the Wind Farm Portal on Nordex Control 2 (NC2) SCADA devices 15 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter.

Key dates

02Disclosure timeline

November 5, 2014 CVE published

November 3, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2014-5408

Related vulnerabilities

04Related CVE

CVE-2023-48320 WordPress Video Player Plugin <= 1.5.22 is vulnerable to Cross Site Scripting (XSS) CVE-2025-41695 Reflected XSS vulnerability in dyn_conn.php CVE-2023-0549 YAFNET Private Message PostPrivateMessage cross site scripting CVE-2022-2932 Cross-site Scripting (XSS) - Reflected in bustle/mobiledoc-kit CVE-2025-30794 WordPress Event Tickets plugin <= 5.20.0 - Reflected Cross Site Scripting (XSS) vulnerability