CVE-2025-57793highCWE-89

CVE-2025-57793: falha de alta gravidade em Explorance Blue

SQL Injection Vulnerability in Explorance Blue

Publicada em

Seguir esta CVE+ Monitorar Blue

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.6epss 0.4%
Explorance Blue versions prior to 8.14.9 contain a SQL injection vulnerability caused by insufficient validation of user-supplied input in a web application component. Crafted input can be executed as part of backend database queries. The issue is exploitable without authentication, significantly elevating the risk.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Produtos afetados
Explorance · Blue
CVEs relacionadas — Explorance Blue

No mesmo produto, das mais perigosas para as menos.

CVE-2025-57794CRITICALUnrestricted File Upload Vulnerability in Explorance BlueEPSS 0.6%CVE-2025-57795CRITICALUnauthenticated Remote File Download in Explorance BlueEPSS 0.6%CVE-2025-57792CRITICALSQL Injection Vulnerability in Explorance BlueEPSS 0.4%CVE-2025-57796MEDIUMUse of a hardcoded static key to protect sensitive data in Explorance BlueEPSS 0.2%