CVE-2025-22492mediumCWE-922

CVE-2025-22492: falha de média gravidade em Eaton Foreseer Reporting Software (FRS)

Insecure storage of connection strings in FRS

Publicada em

Seguir esta CVE+ Monitorar Foreseer Reporting

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.3epss 0.2%
The connection string visible to users with access to FRSCore database on Foreseer Reporting Software (FRS) VM, this string can be used for gaining administrative access to the 4crXref database. This vulnerability has been resolved in the latest version 1.5.100 of FRS.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
Produtos afetados
Eaton · Foreseer Reporting Software (FRS)
CVEs relacionadas — Eaton Foreseer Reporting Software (FRS)

No mesmo produto, das mais perigosas para as menos.

CVE-2025-22491MEDIUMImproper Input Validation in Foreseer Reporting Software (FRS)EPSS 0.2%CVE-2025-22493MEDIUMImproper cookie attributes in Foreseer Reporting Software (FRS)EPSS 0.1%