CVE-2025-22491 — Improper Input Validation in Foreseer Reporting Software (FRS)

CVE-2025-22491

Improper Input Validation in Foreseer Reporting Software (FRS) PUBLISHED

Description (CNA)

The user input was not sanitized on Reporting Hierarchy Management page of Foreseer Reporting Software (FRS) application which could lead into execution of arbitrary JavaScript in a browser context for all the interacting users. This security issue has been patched in the latest version 1.5.100 of the FRS.

Affected (CNA)

Vendor / product	Versions
Eaton / Foreseer Reporting Software (FRS)	affected 0 before 1.5.100

CWE

CWE-79

References

https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2024-1009.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.