Skip to content
OpenAdvisories
High ICSA-25-317-07 2 CVEs

Rockwell Automation FactoryTalk DataMosaix Private Cloud

Published Nov 13, 2025 · Updated Nov 13, 2025

Vendor: Rockwell Automation Product: FactoryTalk® DataMosaix™ Private Cloud

Summary

Successful exploitation of these vulnerabilities could allow an attacker to take over accounts, steal credentials, redirect users to a malicious website, or bypass MFA.

Vulnerabilities 2

  • High 8.6
    CVE-2025-11085

    FactoryTalk® DataMosaix™ Private Cloud – Persistent XSS

    A security issue exists within DataMosaix™ Private Cloud allowing for Persistent XSS. This vulnerability can result in the execution of malicious JavaScript, allowing for account takeover, credential theft, or redirection to a malicious website.

    Rockwell Automation FactoryTalk® DataMosaix™ Private Cloud ICS / OT
  • High 7.6
    CVE-2025-11084

    FactoryTalk® DataMosaix™ Private Cloud – Authentication Bypass

    A security issue exists within DataMosaix™ Private Cloud, allowing attackers to bypass MFA during setup and obtain a valid login-token cookie without knowing the users password. This vulnerability occurs when MFA is enabled but not completed within a 7-day pe…

    Rockwell Automation FactoryTalk® DataMosaix™ Private Cloud ICS / OT

Revision history

  1. #1

    Initial Publication

References