CVE-2025-22493mediumCWE-319

CVE-2025-22493: falha de média gravidade em Eaton Foreseer Reporting Software (FRS)

Improper cookie attributes in Foreseer Reporting Software (FRS)

Publicada em

Seguir esta CVE+ Monitorar Foreseer Reporting

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.6epss 0.1%
Secure flag not set and SameSIte was set to Lax in the Foreseer Reporting Software (FRS). Absence of this secure flag could lead into the session cookie being transmitted over unencrypted HTTP connections. This security issue has been resolved in the latest version of FRS v1.5.100.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L
Produtos afetados
Eaton · Foreseer Reporting Software (FRS)
CVEs relacionadas — Eaton Foreseer Reporting Software (FRS)

No mesmo produto, das mais perigosas para as menos.

CVE-2025-22491MEDIUMImproper Input Validation in Foreseer Reporting Software (FRS)EPSS 0.2%CVE-2025-22492MEDIUMInsecure storage of connection strings in FRSEPSS 0.2%