Eaton Foreseer Reporting Software (Frs) vulnerabilities

3 vulnerabilities

Known vulnerabilities in Eaton Foreseer Reporting Software (Frs), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.3CVE-2025-22492eatonforeseer reporting software (frs)
EPSS score
0.16%
The connection string visible to users with access to FRSCore database on Foreseer Reporting Software (FRS) VM, this string can be used for gaining administrative access to the 4crXref database. This vulnerability has been resolved in the latest version 1.5.100 of FRS.6.7CVE-2025-22491eatonforeseer reporting software (frs)
EPSS score
0.19%
The user input was not sanitized on Reporting Hierarchy Management page of Foreseer Reporting Software (FRS) application which could lead into execution of arbitrary JavaScript in a browser context for all the interacting users. This security issue has been patched in the latest version 1.5.100 of the FRS.5.6CVE-2025-22493eatonforeseer reporting software (frs)
EPSS score
0.11%
Secure flag not set and SameSIte was set to Lax in the Foreseer Reporting Software (FRS). Absence of this secure flag could lead into the session cookie being transmitted over unencrypted HTTP connections. This security issue has been resolved in the latest version of FRS v1.5.100.