CVE-2025-22493mediumCWE-319

CVE-2025-22493: fallo de gravedad media en Eaton Foreseer Reporting Software (FRS)

Improper cookie attributes in Foreseer Reporting Software (FRS)

Publicada el

Seguir esta CVE+ Monitorear Foreseer Reporting

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.6epss 0.1%
Secure flag not set and SameSIte was set to Lax in the Foreseer Reporting Software (FRS). Absence of this secure flag could lead into the session cookie being transmitted over unencrypted HTTP connections. This security issue has been resolved in the latest version of FRS v1.5.100.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L
Productos afectados
Eaton · Foreseer Reporting Software (FRS)
CVEs relacionadas — Eaton Foreseer Reporting Software (FRS)

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-22491MEDIUMImproper Input Validation in Foreseer Reporting Software (FRS)EPSS 0.2%CVE-2025-22492MEDIUMInsecure storage of connection strings in FRSEPSS 0.2%