Skip to content
OpenAdvisories
High · 8.4 CVE-2025-11862 EUVD-2025-84345GHSA-wffg-fw64-5mvq

Verve Asset Manager Access Control Vulnerability

Published Nov 11, 2025 · Updated Nov 12, 2025 · Assigned by Rockwell

Description

A security issue was discovered within Verve Asset Manager allowing unauthorized read-only users to read, update, and delete users via the API.

Affected products

VendorProductAffectedFixed
Rockwell Automation Verve Asset Manager 1.33, 1.34, 1.35, 1.36, 1.37, 1.38, 1.39, 1.40, 1.41, 1.41.1, 1.41.2, 1.41.3 —

Advisories 1

References