CVE-2025-57792 SQL Injection Vulnerability in Explorance Blue
CriticalCVSS 10.0
EPSS 0.44%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Explorance Blue versions prior to 8.14.9 contain a SQL injection vulnerability caused by insufficient validation of user input in a web application endpoint. An attacker can supply crafted input that is executed as part of backend database queries. The issue is exploitable without authentication, significantly raising the risk.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Explorance Blue | < 8.14.9 | 8.14.9 |
References
- www.explorance.com product
- online-help.explorance.com vendor-advisory
- online-help.explorance.com vendor-advisory
- github.com third-party-advisory