Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-9066

Rockwell Automation FactoryTalk® ViewPoint XXE to Denial-of-Service Vulnerability

Description

A security issue was discovered within FactoryTalk® ViewPoint, allowing unauthenticated attackers to achieve XXE. Certain SOAP requests can be abused to perform XXE, resulting in a temporary denial-of-service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation FactoryTalk ViewPoint

Default version status: unaffected

  • V14 and prioraffected

References