← Back

Invensys

invensys

27 CVEs • 22 products

Products (22)

Click to collapse
Toggle
Wonderware Information Server
wonderware_information_server
16 CVEs
Wonderware Application Server
wonderware_application_server
5 CVEs
Wonderware Inbatch
wonderware_inbatch
4 CVEs
Intouch
intouch
4 CVEs
Foxboro Control Software
foxboro_control_software
3 CVEs
Wonderware Hmi Reports
wonderware_hmi_reports
2 CVEs
Archestra Application Object Toolkit
archestra_application_object_toolkit
2 CVEs
Infusion Control Edition
infusion_control_edition
2 CVEs
Infusion Foundation Edition
infusion_foundation_edition
2 CVEs
Infusion Scada
infusion_scada
2 CVEs
Intouch/wonderware Application Server
intouch/wonderware_application_server
2 CVEs
Wonderware Intouch
wonderware_intouch
2 CVEs
Wonderware Archestra Configuration Access Component Activex Control
wonderware_archestra_configuration_access_component_activex_control
1 CVE
Foxboro I/a Series Batch
foxboro_i/a_series_batch
1 CVE
Dasabcip
dasabcip
1 CVE
Daserver Runtime Components
daserver_runtime_components
1 CVE
Dassidirect
dassidirect
1 CVE
Infusion Ce/fe/scada
infusion_ce/fe/scada
1 CVE
Wonderware Historian
wonderware_historian
1 CVE
Wonderware Win Xml Exporter
wonderware_win-xml_exporter
1 CVE
Infusion Integrated Engineering Environment
infusion_integrated_engineering_environment
0 CVEs
Wonderware Archestra Integrated Development Environment
wonderware_archestra_integrated_development_environment
0 CVEs

CVEs (27)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2011-4039
2Dreamreport
Invensys
2Dream Report
Wonderware Hmi Reports
Apr 29, 2026
Feb 10, 2012
N/A· v4
N/A· v3
9.3 HIGH· v2
Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream Report before 4.0 and other products, allows user-assisted remote attackers to execute arbitrary code via a malformed file th...Show more
Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream Report before 4.0 and other products, allows user-assisted remote attackers to execute arbitrary code via a malformed file that triggers a "write access violation."Show less
CVE-2011-4038
2Dreamreport
Invensys
2Dream Report
Wonderware Hmi Reports
Apr 29, 2026
Feb 10, 2012
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream Report before 4.0 and other products, allows remote attackers to inject arbitrary...Show more
Cross-site scripting (XSS) vulnerability in Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream Report before 4.0 and other products, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.Show less
CVE-2011-4870
1Invensys
1Wonderware Inbatch
Apr 29, 2026
Jan 8, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Multiple buffer overflows in the (1) GUIControls, (2) BatchObjSrv, and (3) BatchSecCtrl ActiveX controls in Invensys Wonderware InBatch 9.0 and 9.0 SP1, and InBatch 8.1 SP1, 9.0 SP2, and 9.5 Server and Runtime Clients, a...Show more
Multiple buffer overflows in the (1) GUIControls, (2) BatchObjSrv, and (3) BatchSecCtrl ActiveX controls in Invensys Wonderware InBatch 9.0 and 9.0 SP1, and InBatch 8.1 SP1, 9.0 SP2, and 9.5 Server and Runtime Clients, allow remote attackers to execute arbitrary code via a long string in a property value, a different issue than CVE-2011-3141.Show less
CVE-2011-3141
1Invensys
1Wonderware Inbatch
Apr 29, 2026
Aug 16, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in the InBatch BatchField ActiveX control for Invensys Wonderware InBatch 8.1 SP1, 9.0, and 9.0 SP1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via uns...Show more
Buffer overflow in the InBatch BatchField ActiveX control for Invensys Wonderware InBatch 8.1 SP1, 9.0, and 9.0 SP1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.Show less
CVE-2011-2962
1Invensys
1Wonderware Information Server
Apr 29, 2026
Jul 29, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Multiple stack-based buffer overflows in Invensys Wonderware Information Server 3.1, 4.0, and 4.0 SP1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via two unspecified Ac...Show more
Multiple stack-based buffer overflows in Invensys Wonderware Information Server 3.1, 4.0, and 4.0 SP1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via two unspecified ActiveX controls.Show less
CVE-2010-4557
1Invensys
2Foxboro I/a Series Batch
Wonderware Inbatch
Apr 29, 2026
Dec 17, 2010
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in the lm_tcp service in Invensys Wonderware InBatch 8.1 and 9.0, as used in Invensys Foxboro I/A Series Batch 8.1 and possibly other products, allows remote attackers to cause a denial of service (crash)...Show more
Buffer overflow in the lm_tcp service in Invensys Wonderware InBatch 8.1 and 9.0, as used in Invensys Foxboro I/A Series Batch 8.1 and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted request to port 9001.Show less
CVE-2010-2974
1Invensys
2Wonderware Application Server
Wonderware Archestra Configuration Access Component Activex Control
Apr 29, 2026
Aug 5, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Stack-based buffer overflow in the IConfigurationAccess interface in the Invensys Wonderware Archestra ConfigurationAccessComponent ActiveX control in Wonderware Application Server (WAS) before 3.1 SP2 P01, as used in th...Show more
Stack-based buffer overflow in the IConfigurationAccess interface in the Invensys Wonderware Archestra ConfigurationAccessComponent ActiveX control in Wonderware Application Server (WAS) before 3.1 SP2 P01, as used in the Wonderware Archestra Integrated Development Environment (IDE) and the InFusion Integrated Engineering Environment (IEE), allows remote attackers to execute arbitrary code via the first argument to the UnsubscribeData method.Show less