CVE-2025-11085 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	UNKNOWN				---
Rockwell	CNA	---				---

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: Unknown

Common Weakness Enumeration

CWE-116 - Improper Encoding or Escaping of Output
The software prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.

Vulnerability Media Exposure

[GERMAN] Rockwell Automation FactoryTalk DataMosaix Private Cloud: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Rockwell Automation FactoryTalk ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Cross-Site-Scripting-Angriffe durchzuführen.
Published: 2025-11-10T23:00:00+00:00

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1758.html