Skip to content
OpenAdvisories
High · 8.7 CVE-2025-12807 EUVD-2025-202153GHSA-r8r9-2gq6-r5j8

FactoryTalk® DataMosaix™ Private Cloud SQL Injection

Published Dec 9, 2025 · Updated Dec 9, 2025 · Assigned by Rockwell

Description

A security issue was discovered in DataMosaix Private Cloud, allowing users with low privilege to perform sensitive database operations through exposed API endpoints.

Affected products

VendorProductAffectedFixed
Rockwell Automation FactoryTalk® DataMosaix™ Private Cloud 7.11, 8.00, 8.01 —

Advisories 2

References