Back to Database
Status published
Medium
CVE-2025-22492
Insecure storage of connection strings in FRS
Vulnerability Description
The connection string visible to users with access to FRSCore database on Foreseer Reporting Software (FRS) VM, this string can be used for gaining administrative access to the 4crXref database. This vulnerability has been resolved in the latest version 1.5.100 of FRS.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-22492
Credits & Attribution
No credits recorded in the NVD database.
More from Eaton
View All →CVE-2025-67450
Due to insecure library loading in the Eaton UPS Companion...
High
7.8
CVE-2025-59890
Improper input sanitization in the file archives upload functionality of...
High
7.3
CVE-2025-59889
Improper authentication of library files in the Eaton IPP software...
High
8.6
CVE-2025-59888
Improper quotation in search paths in the Eaton UPS Companion...
Medium
6.7
CVE-2025-59887
Improper authentication of library files in the Eaton UPS Companion...
High
8.6
Affected Vendor
Eaton
View all reports →Affected Software
Foreseer Reporting Software (FRS)
Vulnerable Versions:
0
Timeline
Official Publish:
February 28th, 2025
Last Modified:
February 28th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.