7.6
Élevée
CVE-2025-11084 A security issue exists within DataMosaix™ Private Cloud, allowing attackers to bypass MFA during setup and obtain a…
Description
A security issue exists within DataMosaix™ Private Cloud, allowing attackers to bypass MFA during setup and obtain a valid login-token cookie without knowing the users password. This vulnerability occurs when MFA is enabled but not completed within a 7-day period.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FactoryTalk® DataMosaix™ Private Cloud | Versions non publiées |
Autres CVE de FactoryTalk® DataMosaix™ Private Cloud
Les 4 CVE de FactoryTalk® DataMosaix™ Private Cloud →
CVE-2026-9292
A Stored Cross-Site Scripting security issue exists within FactoryTalk® DataMosaix™ Private Cloud
8.4
Élevée
CVE-2025-12807
A security issue was discovered in DataMosaix Private Cloud, allowing users with low privilege to perform sensitive…
8.7
Élevée
CVE-2025-11085
A security issue exists within DataMosaix™ Private Cloud allowing for Persistent XSS
8.6
Élevée