Skip to content
OpenAdvisories
Medium · 6.7 CVE-2025-22491 EUVD-2025-5502GHSA-vwph-wjvf-7mpg

Improper Input Validation in Foreseer Reporting Software (FRS)

Published Feb 28, 2025 · Updated Aug 26, 2025 · Assigned by Eaton

Description

The user input was not sanitized on Reporting Hierarchy Management page of Foreseer Reporting Software (FRS) application which could lead into execution of arbitrary JavaScript in a browser context
for all the interacting users. This security issue has been patched in the latest version 1.5.100 of the FRS.

Affected products

VendorProductAffectedFixed
Eaton Foreseer Reporting Software (FRS) < 1.5.100 1.5.100

References