CVE-2025-57792criticalCWE-89

CVE-2025-57792: falha crítica em Explorance Blue

SQL Injection Vulnerability in Explorance Blue

Publicada em

Seguir esta CVE+ Monitorar Blue

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 10epss 0.4%
Explorance Blue versions prior to 8.14.9 contain a SQL injection vulnerability caused by insufficient validation of user input in a web application endpoint. An attacker can supply crafted input that is executed as part of backend database queries. The issue is exploitable without authentication, significantly raising the risk.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
Explorance · Blue
CVEs relacionadas — Explorance Blue

No mesmo produto, das mais perigosas para as menos.

CVE-2025-57794CRITICALUnrestricted File Upload Vulnerability in Explorance BlueEPSS 0.6%CVE-2025-57795CRITICALUnauthenticated Remote File Download in Explorance BlueEPSS 0.6%CVE-2025-57793HIGHSQL Injection Vulnerability in Explorance BlueEPSS 0.4%CVE-2025-57796MEDIUMUse of a hardcoded static key to protect sensitive data in Explorance BlueEPSS 0.2%