AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-22493

MEDIUM · CVSS 5.6 EPSS 0.11%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-03-05 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.6. See the original NVD description below for full technical details.

CVE
CVE-2025-22493
Severity
MEDIUM
CVSS
5.6
EPSS
0.11%

Original NVD Description

Secure flag not set and SameSIte was set to Lax in the Foreseer Reporting Software (FRS). Absence of this secure flag could lead into the session cookie being transmitted over unencrypted HTTP connections. This security issue has been resolved in the latest version of FRS v1.5.100.