Back to Database
Status published
Medium
CVE-2025-22493
Improper cookie attributes in Foreseer Reporting Software (FRS)
Vulnerability Description
Secure flag not set and SameSIte was set to Lax in the Foreseer Reporting Software (FRS). Absence of this secure flag could lead into the session cookie being transmitted over unencrypted HTTP connections. This security issue has been resolved in the latest version of FRS v1.5.100.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-22493
Credits & Attribution
No credits recorded in the NVD database.
More from Eaton
View All →CVE-2025-67450
Due to insecure library loading in the Eaton UPS Companion...
High
7.8
CVE-2025-59890
Improper input sanitization in the file archives upload functionality of...
High
7.3
CVE-2025-59889
Improper authentication of library files in the Eaton IPP software...
High
8.6
CVE-2025-59888
Improper quotation in search paths in the Eaton UPS Companion...
Medium
6.7
CVE-2025-59887
Improper authentication of library files in the Eaton UPS Companion...
High
8.6
Affected Vendor
Eaton
View all reports →Affected Software
Foreseer Reporting Software (FRS)
Vulnerable Versions:
0
Timeline
Official Publish:
March 5th, 2025
Last Modified:
March 5th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L