Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2025-11085

FactoryTalk® DataMosaix™ Private Cloud – Persistent XSS

Description

A security issue exists within DataMosaix™ Private Cloud allowing for Persistent XSS. This vulnerability can result in the execution of malicious JavaScript, allowing for account takeover, credential theft, or redirection to a malicious website.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation FactoryTalk® DataMosaix™ Private Cloud

Default version status: unaffected

  • 7.11, 8.00affected

References