Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Eaton Foreseer Reporting Software (FRS) 1.5.100 Clear all filters
TI-2025-16379 CVE-2025-22492 · GHSA-c33f-m87q-92qc

Insecure storage of connection strings in FRS

Priority LOW 29

The connection string visible to users with access to FRSCore database on Foreseer Reporting Software (FRS) VM, this string can be used for gaining administrative access to the 4crXref database.

CVSS 3.1MEDIUM 6.3 Local High privileges No interaction EPSS 0.00163 Published 2025-02-28 Fixed in 1.5.100 CWE-922
TI-2025-16378 CVE-2025-22491 · GHSA-vwph-wjvf-7mpg

Improper Input Validation in Foreseer Reporting Software (FRS)

Priority LOW 31

The user input was not sanitized on Reporting Hierarchy Management page of Foreseer Reporting Software (FRS) application which could lead into execution of arbitrary JavaScript in a browser context for all the interactin…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00194 Published 2025-02-28 Fixed in 1.5.100 CWE-79