TH
Product
Thinmanager
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 9Medium 2Low 0
Watch
Add Thinmanager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-10386 | 9.8 | Oct 25 | CVE-2024-10386 IMPACT An authentication vulnerability exists in the affected product Affected: 11.2.0 before 11.2.10; 12.0.0 before 12.0.8; 12.1.0 before 12.1.9; 13.0.0 before 13.0.6; 13.1.0 before 13.1.4; 13.2.0 before 13.2.3; +1 more |
| CVE-2024-5989 | 9.8 | Jun 25 | Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke SQL injection into the program and cause a remote code execution… Affected: 11.1.0 before 11.1.8; 11.2.0 before 11.2.9; 12.0.0 before 12.0.7; 12.1.0 before 12.1.8; 13.0.0 before 13.0.5; 13.1.0 before 13.1.3; +1 more |
| CVE-2024-5988 | 9.8 | Jun 25 | Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke a local or remote executable and cause a remote code execution… Affected: 11.1.0 before 11.1.8; 11.2.0 before 11.2.9; 12.0.0 before 12.0.7; 12.1.0 before 12.1.8; 13.0.0 before 13.0.5; 13.1.0 before 13.1.3; +1 more |
| CVE-2023-27855 | 9.8 | Mar 22 | In affected versions, a path traversal exists when processing a message in Rockwell Automation's ThinManager ThinServer Affected: 6.0.0 through 10.0.2; 11.0.0 through 11.0.5; 11.1.0 through 11.1.5; 11.2.0 through 11.2.6; 12.0.0 through 12.0.4; 12.1.0 through 12.1.5; +2 more |
| CVE-2022-38742 | 9.8 | Sep 23 | Rockwell Automation ThinManager ThinServer versions 11.0.0 - 13.0.0 is vulnerable to a heap-based buffer overflow Affected: 11.0.0 through 13.0.0 |
| CVE-2025-9065 | 8.8 | Sep 9 | A server-side request forgery security issue exists within Rockwell Automation ThinManager® software due to the lack of input sanitization Affected: 13.0.0 through 14.0.0 |
| CVE-2024-45826 | 8.8 | Sep 12 | CVE-2024-45826 IMPACT Due to improper input validation, a path traversal and remote code execution vulnerability exists when the ThinManager® processes a crafted POST request Affected: 13.1.0 before 13.1.3; 13.2.0 before 13.2.2 |
| CVE-2025-3617 | 7.8 | Apr 15 | A privilege escalation vulnerability exists in the Rockwell Automation ThinManager Affected: 14.0.0 before 14.0.2 |
| CVE-2024-10387 | 7.5 | Oct 25 | CVE-2024-10387 IMPACT A Denial-of-Service vulnerability exists in the affected product Affected: 11.2.0 before 11.2.10; 12.0.0 before 12.0.8; 12.1.0 before 12.1.9; 13.0.0 before 13.0.6; 13.1.0 through 13.1.4; 13.2.0 through 13.2.3; +1 more |
| CVE-2024-7986 | 7.5 | Aug 23 | A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information Affected: 11.1.0 before 11.1.8; 11.2.0 before 11.2.9; 12.0.0 before 12.0.7; 12.1.0 before 12.1.8; 13.0.0 before 13.0.5; 13.1.0 before 13.1.3; +1 more |
| CVE-2024-5990 | 7.5 | Jun 25 | Due to an improper input validation, an unauthenticated threat actor can send a malicious message to a monitor thread within Rockwell Automation ThinServer™ and cause a… Affected: 11.1.0 before 11.1.8; 11.2.0 before 11.2.9; 12.0.0 before 12.0.7; 12.1.0 before 12.1.8; 13.0.0 before 13.0.4; 13.1.0 before 13.1.2 |
| CVE-2023-2443 | 7.5 | May 11 | Rockwell Automation ThinManager product allows the use of medium strength ciphers Affected: through 13.0 |
| CVE-2023-27857 | 7.5 | Mar 22 | In affected versions, a heap-based buffer over-read condition occurs when the message field indicates more data than is present in the message field in Rockwell Automation's… Affected: 11.0.0 before 11.0.5; 11.1.0 before 11.1.5; 11.2.0 before 11.2.6; 12.0.0 before 12.0.3; 12.1.0 before 12.1.4; 13.0.0 |
| CVE-2023-27856 | 7.5 | Mar 22 | In affected versions, path traversal exists when processing a message of type 8 in Rockwell Automation's ThinManager ThinServer Affected: 6.0.0 through 10.0.2; 11.0.0 through 11.0.5; 11.1.0 through 11.1.5; 11.2.0 through 11.2.6; 12.0.0 through 12.0.4; 12.1.0 through 12.1.5; +2 more |
| CVE-2023-2913 | 6.5 | Jul 18 | An executable used in Rockwell Automation ThinManager ThinServer can be configured to enable an API feature in the HTTPS Server Settings Affected: 13.0.0 through 13.0.2 |
| CVE-2025-3618 | 5.5 | Apr 15 | A denial-of-service vulnerability exists in the Rockwell Automation ThinManager Affected: before 11.2.11; 12.0.0 before 12.0.9; 12.1.0 before 12.1.10; 13.0.0 before 13.0.7; 13.1.0 before 13.1.5; 13.2.0 before 13.2.4; +1 more |
Showing 16