How many CVEs does Rockwell Automation thinmanager have?

Rockwell Automation thinmanager has 16 published CVE records since 2022.

How many Rockwell Automation thinmanager CVEs are in CISA KEV?

None of Rockwell Automation thinmanager's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Rockwell Automation thinmanager vulnerabilities?

Yes — 2 of Rockwell Automation thinmanager's CVEs have a known public exploit.

Which versions of Rockwell Automation thinmanager are affected?

86 distinct Rockwell Automation thinmanager versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Rockwell Automation thinmanager CVEs?

Rockwell Automation thinmanager's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-610 (Externally Controlled Reference to a Resource in Another Sphere), CWE-125 (Out-of-bounds Read).

How many critical Rockwell Automation thinmanager vulnerabilities are there?

Rockwell Automation thinmanager has 5 critical and 10 high-severity CVEs.

What is the average severity of Rockwell Automation thinmanager CVEs?

The average CVSS base score across Rockwell Automation thinmanager's scored CVEs is 8.5.

Rockwell Automation thinmanager Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every Rockwell Automation thinmanager version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

13.1.0-13.1.21 CVE
13.2.0-13.2.11 CVE

Version ranges

11.1.0 <= v < 11.1.84 CVEs
11.2.0 <= v < 11.2.94 CVEs
12.0.0 <= v < 12.0.74 CVEs
12.1.0 <= v < 12.1.84 CVEs
13.1.0 <= v < 13.1.34 CVEs
13.2.0 <= v < 13.2.24 CVEs
13.0.0 <= v < 13.0.43 CVEs
13.0.0 <= v < 13.0.53 CVEs
13.0.0 <= v <= 13.0.03 CVEs
13.1.0 <= v < 13.1.23 CVEs
>= 14.0.02 CVEs
11.0.0 <= v <= 11.0.52 CVEs
11.1.0 <= v <= 11.1.52 CVEs
11.2.0 <= v < 11.2.102 CVEs
11.2.0 <= v <= 11.2.62 CVEs
11.2.0 <= v <= 11.2.92 CVEs
12.0.0 <= v < 12.0.82 CVEs
12.0.0 <= v <= 12.0.42 CVEs
12.0.0 <= v <= 12.0.72 CVEs
12.1.0 <= v < 12.1.92 CVEs
12.1.0 <= v <= 12.1.52 CVEs
12.1.0 <= v <= 12.1.82 CVEs
13.0.0 <= v < 13.0.62 CVEs
13.0.0 <= v <= 13.0.52 CVEs
13.0.1 <= v <= 13.0.12 CVEs
13.1.0 <= v <= 13.1.32 CVEs
13.2.0 <= v <= 13.2.22 CVEs
14.0.0 <= v < 14.0.22 CVEs
14.0.0 <= v <= 14.0.02 CVEs
6.0.0 <= v <= 10.0.22 CVEs
< 11.2.111 CVE
<= 13.01 CVE
>= 13.0 - 14.01 CVE
>= v14.0.1 and earlier1 CVE
11.0.0 <= v < 11.0.51 CVE
11.0.0 <= v <= 13.0.01 CVE
11.1.0 <= v < 11.1.51 CVE
11.2.0 <= v < 11.2.61 CVE
12.0.0 <= v < 12.0.31 CVE
12.0.0 <= v < 12.0.91 CVE
12.1.0 <= v < 12.1.101 CVE
12.1.0 <= v < 12.1.41 CVE
13.0.0 <= v < 13.0.71 CVE
13.0.0 <= v <= 13.0.21 CVE
13.0.0 <= v <= 14.0.01 CVE
13.1.0 <= v < 13.1.41 CVE
13.1.0 <= v < 13.1.51 CVE
13.1.0 <= v <= 13.1.41 CVE
13.2.0 <= v < 13.2.31 CVE
13.2.0 <= v < 13.2.41 CVE
13.2.0 <= v <= 13.2.31 CVE

Fixed in

11.1.84 CVEs
11.2.94 CVEs
12.0.74 CVEs
12.1.84 CVEs
13.1.34 CVEs
13.2.24 CVEs
13.0.43 CVEs
13.0.53 CVEs
13.1.23 CVEs
> 11.2.92 CVEs
> 12.0.72 CVEs
> 12.1.82 CVEs
> 13.0.52 CVEs
> 13.1.32 CVEs

Find a version

16 CVEs

Sort

Rockwell Automation ThinManager® Server-Side Request Forgery Vulnerability
CVE-2025-9065CWE-610
High · CVSS 8.6
EPSS 0.4% (35th pct)2025-09-09
Local Privilege Escalation Vulnerability
CVE-2025-3618
Patch
CWE-119
High · CVSS 8.5
EPSS 1.7% (74th pct)2025-04-15
Local Privilege Escalation in ThinManager®
CVE-2025-3617
Patch
CWE-276
High · CVSS 8.5
EPSS 0.3% (21th pct)2025-04-15
High vulnerability · 2024-10-25
CVE-2024-10387
Patch
Workaround
CWE-125
High · CVSS 8.7
EPSS 8.0% (94th pct)2024-10-25
Critical vulnerability · 2024-10-25
CVE-2024-10386
Patch
Workaround
CWE-306
Critical · CVSS 9.3
EPSS 16.6% (97th pct)2024-10-25
High vulnerability · 2024-09-12
CVE-2024-45826
Patch
CWE-610
High · CVSS 8.5
EPSS 11.2% (95th pct)2024-09-12
Rockwell Automation ThinManager® ThinServer™ Information Disclosure
CVE-2024-7986
Patch
CWE-732
Medium · CVSS 6.8
EPSS 0.6% (43th pct)2024-08-23
ThinManager® ThinServer™ Improper Input Validation Vulnerability
CVE-2024-5990
Patch
CWE-20
High · CVSS 8.7
EPSS 2.3% (81th pct)2024-06-25
Rockwell Automation ThinManager® ThinServer™ Improper Input Validation Vulnerability
CVE-2024-5989
Patch
CWE-20
Critical · CVSS 9.3
EPSS 2.4% (82th pct)2024-06-25
Rockwell Automation ThinManager® ThinServer™ Improper Input Validation Vulnerability
CVE-2024-5988
Patch
CWE-20
Critical · CVSS 9.3
EPSS 2.7% (84th pct)2024-06-25
High vulnerability · 2023-07-18
CVE-2023-2913
Patch
CWE-23
High · CVSS 7.5
EPSS 1.3% (67th pct)2023-07-18
High vulnerability · 2023-05-11
CVE-2023-2443
Patch
High · CVSS 7.5
EPSS 0.7% (48th pct)2023-05-11
Rockwell Automation ThinManager ThinServer Heap-Based Buffer Overflow
CVE-2023-27857
Patch
CWE-125
High · CVSS 7.5
EPSS 18.3% (97th pct)2023-03-22
Rockwell Automation ThinManager ThinServer Path Traversal Download
CVE-2023-27856
Public exploit
Patch
CWE-22
High · CVSS 7.5
EPSS 77.2% (100th pct)2023-03-21
Rockwell Automation ThinManager ThinServer Path Traversal Upload
CVE-2023-27855
Public exploit
Patch
CWE-22
Critical · CVSS 9.8
EPSS 13.5% (96th pct)2023-03-21
Critical vulnerability · 2022-09-23
CVE-2022-38742
Patch
CWE-122
Critical · CVSS 9.8
EPSS 21.8% (97th pct)2022-09-23

Rockwell Automation thinmanager Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other Rockwell Automation products

Frequently asked questions

References

Track Rockwell Automation thinmanager vulnerabilities