Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2025-14272

Rockwell Automation FactoryTalk Analytics PavilionX

Description

A security issue was identified in Pavilion due to improper authorization enforcement in API endpoints. This vulnerability can allow an unauthorized actor to execute privileged operations, including user/role management and other administrative actions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation FactoryTalk Analytics PavilionX

Default version status: unaffected

  • 7.0affected

References