Rockwell Automation Dataedgeplatform Datamosaix™ Private Cloud vulnerabilities
3 vulnerabilities
Known vulnerabilities in Rockwell Automation Dataedgeplatform Datamosaix™ Private Cloud, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-0659rockwell automationdataedgeplatform datamosaix™ private cloud
EPSS score0.39%
A path
traversal vulnerability exists in the Rockwell Automation DataEdge Platform DataMosaix Private Cloud. By specifying the character
sequence in the body of the vulnerable endpoint, it is possible to overwrite
files outside of the intended directory. A threat actor with admin privileges could
leverage this vulnerability to overwrite reports including user projects.CVE-2024-7952rockwell automationdataedgeplatform datamosaix™ private cloudEPSS score0.41%
A data exposure vulnerability exists in the affected product. There are hardcoded links in the source code that lead to JSON files that can be reached without authentication. If exploited, a threat actor could view customer data.CVE-2024-7953rockwell automationdataedgeplatform datamosaix™ private cloudEPSS score0.24%
A vulnerability exists in the affected products that allows a threat actor to create a project and become the administrator for it. If exploited, a threat actor could create, modify, and delete their own project.