Known vulnerabilities in ThinManager
Vendor:
Rockwell Automation
Software:
ThinManager
Software CPE:
cpe:2.3:a:rockwell_automation:thinmanager:*:*:*:*:*:*:*:*
Website:
https://www.rockwellautomation.com/
Total vulnerabilities:
21
Public exploits:
4
Known exploited (KEV):
4
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
14.1
14.0.2
13.2.4
13.2.3
13.1.5
12.0.9
11.2.11
14.0.1
13.1.4
13.0.6
12.1.9
12.0.8
11.2.10
14.0.0
13.2.1
13.1.2
12.0.7
11.2.9
13.2.2
13.1.3
13.0.5
12.1.8
11.1.8
13.2.0
11.2.8
12.0.6
12.0.5
12.1.7
12.1.6
11.2.7
11.1.7
11.1.6
11.0.7
11.0.6
13.1.0
13.1.1
13.0.3
13.0.2
13.0.1
12.1.5
12.1.4
12.0.4
12.0.3
11.2.6
11.1.5
10.0
9.0
8.0
7.0
6.0
13.00.01
12.01.04
12.00.03
11.02.06
11.01.05
11.00.05
13.0.0
12.1.3
12.1.2
12.1.1
12.1.0
12.0.2
12.0.1
12.0.0
11.2.5
11.2.4
11.2.3
11.2.2
11.2.1
11.2.0
11.1.4
11.1.3
11.1.2
11.1.1
11.1.0
11.0.5
11.0.4
11.0.3
11.0.2
11.0.1
11.0.0
Vulnerabilities (21)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU115148 - Server-Side Request Forgery (SSRF) CVE-2025-9065 |
CWE-918 | Medium | 14.1 | 10.09.2025 |
SB2025091043 |
||
| #VU108167 - Incorrect Default Permissions CVE-2025-3617 |
CWE-276 | Low | 14.0.2 | 02.05.2025 |
SB2025050259 |
||
| #VU108166 - Memory corruption CVE-2025-3618 |
CWE-119 | High | 11.2.11, 12.0.9, 13.1.5, 13.2.4, 14.0.2 | 02.05.2025 |
SB2025050259 |
||
| #VU99574 - Out-of-bounds read CVE-2024-10387 |
CWE-125 | Medium | 11.2.10, 12.0.8, 12.1.9, 13.0.6, 13.1.4, 14.0.1 | 01.11.2024 |
SB2024110103 |
||
| #VU99573 - Missing Authentication for Critical Function CVE-2024-10386 |
CWE-306 | High | 11.2.10, 12.0.8, 12.1.9, 13.0.6, 13.1.4, 14.0.1 | 01.11.2024 |
SB2024110103 |
||
| #VU97308 - Externally Controlled Reference to a Resource in Another Sphere CVE-2024-45826 |
CWE-610 | Low | 13.1.3, 13.2.2 | 16.09.2024 |
SB2024091616 |
||
| #VU96480 - Improper Privilege Management CVE-2024-7986 |
CWE-269 | Low | 11.1.8, 11.2.9, 12.0.7, 12.1.8, 13.0.5, 13.1.3, 13.2.2 | 23.08.2024 |
SB2024082329 |
||
| #VU96478 - Incorrect Permission Assignment for Critical Resource CVE-2024-7987 |
CWE-732 | Low | 11.1.8, 11.2.9, 12.0.7, 12.1.8, 13.0.5, 13.1.3, 13.2.2 | 23.08.2024 |
SB2024082329 |
||
| #VU96477 - Unrestricted Upload of File with Dangerous Type CVE-2024-7988 |
CWE-434 | High | 11.1.8, 11.2.9, 12.0.7, 12.1.8, 13.0.5, 13.1.3, 13.2.2 | 23.08.2024 |
SB2024082329 |
||
| #VU94180 - Improper input validation CVE-2024-5990 |
CWE-20 | Medium | 11.1.8, 11.2.9, 12.0.7, 12.1.8, 13.0.5, 13.1.3, 13.2.2 | 12.07.2024 |
SB2024071205 |
||
| #VU94179 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2024-5989 |
CWE-89 | High | 11.1.8, 11.2.9, 12.0.7, 12.1.8, 13.0.5, 13.1.3, 13.2.2 | 12.07.2024 |
SB2024071205 |
||
| #VU94178 - Improper input validation CVE-2024-5988 |
CWE-20 | High | 11.1.8, 11.2.9, 12.0.7, 12.1.8, 13.0.5, 13.1.3, 13.2.2 | 12.07.2024 |
SB2024071205 |
||
| #VU80035 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2023-2917 |
CWE-22 | High | 11.0.7, 11.1.7, 11.2.8, 12.0.6, 12.1.7, 13.0.3, 13.1.1 | 28.08.2023 |
SB2023082822 |
||
| #VU80032 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2023-2915 |
CWE-22 | Medium | 11.0.7, 11.1.7, 11.2.8, 12.0.6, 12.1.7, 13.0.3, 13.1.1 | 28.08.2023 |
SB2023082822 |
||
| #VU80031 - Improper input validation CVE-2023-2914 |
CWE-20 | Medium | 11.0.7, 11.1.7, 11.2.8, 12.0.6, 12.1.7, 13.0.3, 13.1.1 | 28.08.2023 |
SB2023082822 |
||
| #VU78686 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2023-2913 |
CWE-22 | Medium | 13.0.3, 13.1.1 | 26.07.2023 |
SB2023072638 |
||
| #VU77800 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2023-27855 |
CWE-22 | Medium | - | 29.06.2023 |
SB2023032414 |
||
| #VU77799 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2023-27856 |
CWE-22 | High | - | 29.06.2023 |
SB2023032414 |
||
| #VU76071 - Inadequate Encryption Strength CVE-2023-2443 |
CWE-326 | Medium | 13.0.2 | 12.05.2023 |
SB2023051215 |
||
| #VU74008 - Heap-based Buffer Overflow CVE-2023-27857 |
CWE-122 | Medium | - | 24.03.2023 |
SB2023032414 |
Showing elements 1 - 20 out of 21