Medium severity6.7NVD Advisory· Published Feb 28, 2025· Updated Apr 15, 2026

CVE-2025-22491

Description

The user input was not sanitized on Reporting Hierarchy Management page of Foreseer Reporting Software (FRS) application which could lead into execution of arbitrary JavaScript in a browser context for all the interacting users. This security issue has been patched in the latest version 1.5.100 of the FRS.

Affected products

Eaton/Foreseer Reporting Softwarellm-fuzzy
Range: <1.5.100

Patches

Vulnerability mechanics

References

www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2024-1009.pdfnvd

News mentions

No linked articles in our index yet.

cvss	0.436
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000