CVE-2025-22493mediumCWE-319

CVE-2025-22493: medium-severity vulnerability in Eaton Foreseer Reporting Software (FRS)

Improper cookie attributes in Foreseer Reporting Software (FRS)

Published

Follow this CVE+ Monitor Foreseer Reporting

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.6epss 0.1%
Secure flag not set and SameSIte was set to Lax in the Foreseer Reporting Software (FRS). Absence of this secure flag could lead into the session cookie being transmitted over unencrypted HTTP connections. This security issue has been resolved in the latest version of FRS v1.5.100.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L
Affected products
Eaton · Foreseer Reporting Software (FRS)
Related CVEs — Eaton Foreseer Reporting Software (FRS)

In the same product, most dangerous first.

CVE-2025-22491MEDIUMImproper Input Validation in Foreseer Reporting Software (FRS)EPSS 0.2%CVE-2025-22492MEDIUMInsecure storage of connection strings in FRSEPSS 0.2%