Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2025-22491

Improper Input Validation in Foreseer Reporting Software (FRS)

Description

The user input was not sanitized on Reporting Hierarchy Management page of Foreseer Reporting Software (FRS) application which could lead into execution of arbitrary JavaScript in a browser context for all the interacting users. This security issue has been patched in the latest version 1.5.100 of the FRS.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Eaton Foreseer Reporting Software (FRS)

Default version status: unaffected

  • 0 to < 1.5.100affected

References