CVE-2025-11085

A security issue exists within DataMosaix™ Private Cloud allowing for Persistent XSS. This vulnerability can result in the execution of malicious JavaScript, allowing for account takeover, credential theft, or redirection to a malicious website.

Score

CVSS 4.0 8.6 High

Status

Deferred - PSIRT@rockwellautomation.com

Published

2025-11-11

Last modified

2026-10-18

Weaknesses

CWE-116

Affected products

• Factorytalk Datamosaix Private Cloud (Rockwell Automation)

References

• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1758.html