CVE-2014-5411
Multiple cross-site scripting (XSS) vulnerabilities in Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R3 through 2014 R1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
- Score
- CVSS 2.0 4.9 Medium
- Status
- Modified - ics-cert@hq.dhs.gov
- Published
- 2014-09-18
- Last modified
- 2025-11-04
- Weaknesses
- CWE-79
Affected products
- Clearscada (Aveva)
- Scada Expert Clearscada (Schneider-electric)
- Clearscada (Schneider Electric)
- Scada Expert Clearscada (Schneider Electric)
References
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2014/icsa-14-259-01a.json
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-259-01a
- https://ics-cert.us-cert.gov/advisories/ICSA-14-259-01
