CVE-2025-22492

—

CVSS 3.1

6.3 medium

EPSS

<1%p5

Published

Feb 28, 2025 (Feb 28, 2025)

Modified

Jun 17, 2026

Description

The connection string visible to users with access to FRSCore database on Foreseer Reporting Software (FRS) VM, this string can be used for gaining administrative access to the 4crXref database. This vulnerability has been resolved in the latest version 1.5.100 of FRS.

Weakness: CWE-922
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.