CVE-2025-22491: Eaton Foreseer Reporting Software Frs

Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days.

The user input was not sanitized on Reporting Hierarchy Management page of Foreseer Reporting Software (FRS) application which could lead into execution of arbitrary JavaScript in a browser context for all the interacting users. This security issue has been patched in the latest version 1.5.100 of the FRS.

Affected products

• Eaton Foreseer Reporting Software Frs: before 1.5.100 (fixed in 1.5.100)

Published 2025-02-28. Last modified 2026-06-17.