What’s Vulnerable › Vulnerabilities
CVE-2025-22492: Insecure storage of connection strings in FRS
- Severity: medium (CVSS 6.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-02-28 · updated 2026-06-17
- Weakness: CWE-922
Description
The connection string visible to users with access to FRSCore database on Foreseer Reporting Software (FRS) VM, this string can be used for gaining administrative access to the 4crXref database. This vulnerability has been resolved in the latest version 1.5.100 of FRS.
Affected products
- Eaton Foreseer Reporting Software (FRS): before 1.5.100 — fixed in 1.5.100
How to fix
Upgrade to a fixed version: Eaton Foreseer Reporting Software (FRS) 1.5.100. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2025-22492 or the next vulnerability affects your stack