CVE-2025-22491
The user input was not sanitized on Reporting Hierarchy Management page of Foreseer Reporting Software (FRS) application which could lead into execution of arbitrary JavaScript in a browser context for all the interacting users. This security issue has been patched in the latest version 1.5.100 of the FRS.
- Score
- CVSS 3.1 6.7 Medium
- Status
- Deferred - CybersecurityCOE@eaton.com
- Published
- 2025-02-28
- Last modified
- 2025-08-26
- Weaknesses
- CWE-79
Affected products
References
- https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2024-1009.pdf
