Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Eaton Component: Foreseer Electrical Power Monitoring System Clear all filters
TI-2024-20787 CVE-2024-31416 · GHSA-9mqh-56r5-64mq

Integer overflow in Eaton Foreseer

Priority LOW 28

The Eaton Foreseer software provides multiple customizable input fields for the users to configure parameters in the tool like alarms, reports, etc.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00268 Published 2024-09-13 Fixed in 7.8.600 CWE-190
TI-2024-20786 CVE-2024-31415 · GHSA-573v-9j9r-xm6w

Cleartext storage of sensitive information in Eaton Foreseer

Priority LOW 36

The Eaton Foreseer software provides the feasibility for the user to configure external servers for multiple purposes such as network management, user management, etc.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00119 Published 2024-09-13 Fixed in 7.8.500 CWE-312
TI-2024-20785 CVE-2024-31414 · GHSA-5pqc-wgxh-g2rx

Cross-site scripting in Eaton Foreseer

Priority LOW 31

The Eaton Foreseer software provides users the capability to customize the dashboard in WebView pages.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00288 Published 2024-09-13 Fixed in 7.8.600 CWE-79
TI-2022-14876 CVE-2022-33859 · GHSA-g237-q563-mgqx

Unrestricted file upload in Eaton Foreseer EPMS

Priority MEDIUM 42

A security vulnerability was discovered in the Eaton Foreseer EPMS software.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00412 Published 2022-10-28 No fix listed CWE-434