API Vulnerability in Verve Asset Manager by Rockwell Automation
CVE-2025-11862
8.4HIGH
Key Information:
- Vendor
Rockwell Automation
- Status
- Vendor
- CVE Published:
- 11 November 2025
What is CVE-2025-11862?
A security flaw has been identified in Verve Asset Manager that permits unauthorized read-only users to access, modify, and delete user information through the API. This vulnerability can potentially compromise user data integrity and allows attackers to exploit the system's permissions.
Affected Version(s)
Verve Asset Manager 1.33, 1.34, 1.35, 1.36, 1.37, 1.38, 1.39, 1.40, 1.41, 1.41.1, 1.41.2, 1.41.3