Factorytalk® Datamosaix™ Private Cloud
Approved changes feed: RSS · Atom
cpe:2.3:a:rockwell_automation:factorytalk®_datamosaix™_private_cloud:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Rockwell Automation (dde15a4c-943a-57fe-888d-2bc03ade6545) |
|---|---|
| Product | Factorytalk® Datamosaix™ Private Cloud (88495b3f-9c7f-5954-8ab0-5e1cd6fcf482) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-9292 |
vulnerable | 2026-07-29 01:09:06.984842 |
Rockwell Automation FactoryTalk® DataMosaix™ Private Cloud - Stored Cross-Site Scripting
A Stored Cross-Site Scripting security issue exists within FactoryTalk® DataMosaix™ Private Cloud. The vulnerability stems from improper neutralization of user-supplied input within the Workflows configuration. An authenticated attacker with high privileges can inject malicious scripts that are permanently stored on the server. This vulnerability can result in the execution of malicious JavaScript when other users access the affected page, potentially allowing for account takeover, credential theft, or redirection to a malicious website.
Published: 2026-07-14T15:05:37.008Z
Updated: 2026-07-14T15:53:41.359Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12807 |
vulnerable | 2026-06-08 07:04:31.011106 |
FactoryTalk® DataMosaix™ Private Cloud SQL Injection
A security issue was discovered in DataMosaix Private Cloud, allowing users with low privilege to perform sensitive database operations through exposed API endpoints.
Published: 2025-12-09T13:56:32.569Z
Updated: 2025-12-09T16:01:08.935Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11085 |
vulnerable | 2026-06-08 07:02:28.030706 |
FactoryTalk® DataMosaix™ Private Cloud – Persistent XSS
A security issue exists within DataMosaix™ Private Cloud allowing for Persistent XSS. This vulnerability can result in the execution of malicious JavaScript, allowing for account takeover, credential theft, or redirection to a malicious website.
Published: 2025-11-11T13:35:19.060Z
Updated: 2025-11-12T20:03:39.563Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11084 |
vulnerable | 2026-06-08 07:02:28.030143 |
FactoryTalk® DataMosaix™ Private Cloud – Authentication Bypass
A security issue exists within DataMosaix™ Private Cloud, allowing attackers to bypass MFA during setup and obtain a valid login-token cookie without knowing the users password. This vulnerability occurs when MFA is enabled but not completed within a 7-day period.
Published: 2025-11-11T13:26:05.623Z
Updated: 2025-11-12T20:03:55.391Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.