← Back

CVE-2025-22492

nvd nist
Published: Feb 28, 2025Modified: Jun 17, 2026Deferred

JSON object

Loading...
6.3
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
Exploitability: 0.8 / Impact: 5.5
Source: CybersecurityCOE@eaton.com (Secondary)

Description

The connection string visible to users with access to FRSCore database on Foreseer Reporting Software (FRS) VM, this string can be used for gaining administrative access to the 4crXref database. This vulnerability has been resolved in the latest version 1.5.100 of FRS.

Related CWEs

CWE-922
Insecure Storage of Sensitive Information
The product stores sensitive information without properly limiting read or write access by unauthorized actors.

References (1)

Source: CybersecurityCOE@eaton.com

Timeline

No history available yet.