8.6
High
CVE-2025-9065 A server-side request forgery security issue exists within Rockwell Automation ThinManager® software due to the lack…
Description
A server-side request forgery security issue exists within Rockwell Automation ThinManager® software due to the lack of input sanitization. Authenticated attackers can exploit this vulnerability by specifying external SMB paths, exposing the ThinServer® service account NTLM hash.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ThinManager | Versions not published |
Other CVEs of ThinManager
The 4 CVEs of ThinManager →
CVE-2025-3618
A denial-of-service vulnerability exists in the Rockwell Automation ThinManager
8.5
High
CVE-2024-45826
CVE-2024-45826 IMPACT Due to improper input validation, a path traversal and remote code execution vulnerability…
8.5
High
CVE-2023-2443
Rockwell Automation ThinManager product allows the use of medium strength ciphers
7.5
High