Foreseer Reporting Software (Frs)
Approved changes feed: RSS · Atom
cpe:2.3:a:eaton:foreseer_reporting_software_(frs):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Eaton (b7450635-db8f-5426-bd84-6f4be38222d9) |
|---|---|
| Product | Foreseer Reporting Software (Frs) (145254e0-4501-52ff-bde4-8ed714f6867d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-22493 |
vulnerable | 2026-06-08 07:10:53.276100 |
Improper cookie attributes in Foreseer Reporting Software (FRS)
MEDIUM (5.6)
Secure flag not set and SameSIte was set to Lax in the Foreseer Reporting Software (FRS). Absence of this secure flag could lead into the session cookie being transmitted over unencrypted HTTP connections. This security issue has been resolved in the latest version of FRS v1.5.100.
Published: 2025-03-05T08:53:59.122Z
Updated: 2025-03-05T14:50:42.281Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-22492 |
vulnerable | 2026-06-08 07:10:53.275825 |
Insecure storage of connection strings in FRS
MEDIUM (6.3)
The connection string visible to users with access to FRSCore database on Foreseer Reporting Software (FRS) VM, this
string can be used for gaining administrative access to the 4crXref database. This vulnerability has been resolved in the latest version 1.5.100 of FRS.
Published: 2025-02-28T08:29:33.347Z
Updated: 2025-02-28T13:14:41.526Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-22491 |
vulnerable | 2026-06-08 07:10:53.275373 |
Improper Input Validation in Foreseer Reporting Software (FRS)
MEDIUM (6.7)
The user input was not sanitized on Reporting Hierarchy Management page of Foreseer Reporting Software (FRS) application which could lead into execution of arbitrary JavaScript in a browser context
for all the interacting users. This security issue has been patched in the latest version 1.5.100 of the FRS.
Published: 2025-02-28T08:24:21.219Z
Updated: 2025-08-26T10:19:15.302Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.