PT-2025-9082 · Unknown · Foreseer Reporting

Published 2025-02-28 · Updated 2025-08-26 · CVE-2025-22491

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Foreseer Reporting Software (FRS) versions prior to 1.5.100

Description The issue arises from unsanitized user input on the Reporting Hierarchy Management page of the FRS application, potentially leading to the execution of arbitrary JavaScript in a browser context for all interacting users.

Recommendations For versions prior to 1.5.100, update to version 1.5.100 to resolve the issue.

Fix

XSS

RCE

Weakness Enumeration

CWE-79

CWE-20

Related Identifiers

CVE-2025-22491

Affected Products

Foreseer Reporting

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-22491 · Security Note
• https://eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2024-1009.pdf · Note
• https://twitter.com/cybercronai/status/1895651586241655247 · Twitter Post
• https://t.me/cveNotify/133432 · Telegram Post
• https://t.me/cvedetector/19131 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1895441803538583699 · Twitter Post
• https://twitter.com/CVEnew/status/1895619326239220216 · Twitter Post