CVE-2025-11085CWE-116

CVE-2025-11085

published November 11, 2025

CVSS

8.6

EPSS

Percentile

29.8

In the wild

Unconfirmed

What it is

A security issue exists within DataMosaix™ Private Cloud allowing for Persistent XSS. This vulnerability can result in the execution of malicious JavaScript, allowing for account takeover, credential theft, or redirection to a malicious website.

The record

Technical detail

CVSS: 8.6 · NONE
CVSS v4.0: Not supplied
EPSS: 0.00371 · 29.8th percentile
Weakness: CWE-116 · Improper Encoding or Escaping of Output
Published: 2025-11-11T19:15Z

References (1)

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1758.html · [email protected]

EPSS history

Timeline

11 NOV 13:35Z
FactoryTalk® DataMosaix™ Private Cloud – Persistent XSS
cvelistv5