CVE-2025-9066CWE-20

CVE-2025-9066

published October 14, 2025

CVSS
8.7
EPSS
0%
Percentile
38.5
In the wild
Unconfirmed
What it is

A security issue was discovered within FactoryTalk® ViewPoint, allowing unauthenticated attackers to achieve XXE. Certain SOAP requests can be abused to perform XXE, resulting in a temporary denial-of-service.

The record
Technical detail
CVSS
8.7 · NONE
CVSS v4.0
Not supplied
EPSS
0.00456 · 38.5th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2025-10-14T17:15Z
References (1)
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1752html · [email protected]
EPSS history
Timeline
  • 14 OCT 12:15Z
    Rockwell Automation FactoryTalk® ViewPoint XXE to Denial-of-Service Vulnerability
    cvelistv5