Every CVESearch/Get API key

CVE-2014-5399

Schneider Electric Wonderware SQL Injection

7.5

CVE-2014-5399 is a vulnerability (CVSS 7.5) in Invensys Wonderware Information Server, published August 28, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.59%, the 75th percentile. No source names a fixed version.

What does this mean?
Severity
7.5 CVSS 2.0, CVE List
Exploit chance
1.59%EPSS, 75th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

SQL injection vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Exploit likelihood

1.59%Up 0.5 points since Feb 4, 2022
90%50%10%1%

Affected products

What each source reports

CVE List Score used7.5

Schneider Electric Wonderware SQL Injection

SQL injection vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Record
CVE-2014-5399
CVSS 2.0
7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-89
Updated
2026-11-02
EUVDEUVD-2014-52877.5

SQL injection vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Record
EUVD-2014-5287
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
GitHub AdvisoriesGHSA-5h5j-vrcw-6p8pNo score

SQL injection vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0...

SQL injection vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Record
GHSA-5h5j-vrcw-6p8p
Weakness
CWE-89
Updated
2026-11-02
NVD7.5

SQL injection vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Record
CVE-2014-5399
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-89
Updated
2026-11-02

History

History
RecordedChangedSources
facts
first indexedCVE List, EUVD, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open