Explorance Blue versions prior to 8.14.9 contain a SQL injection vulnerability caused by insufficient validation of user-supplied input in a web application component. Crafted input can be executed as part of backend database queries. The issue is exploitable without authentication, significantly elevating the risk.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:NExplorance Blue
APPExplorance< 8.14.9
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
SQLi
CWE
Related vulnerabilities
CVE-2025-57792CRITICAL10.0PL ✓same product
SQL Injection bez uwierzytelnienia w Explorance Blue (CVE-2025-57792)
CVE-2025-57794CRITICAL9.1PL ✓same product
RCE przez unrestricted file upload w Explorance Blue (panel admina)
CVE-2025-57795CRITICAL9.9PL ✓same product
RCE przez podatny upload plików w Explorance Blue (CVE-2025-57795)
CVE-2025-57796MEDIUM6.8same product
Explorance Blue w wersjach poprzedzających 8.14.12 stosuje odwracalne szyfrowanie symetryczne z zakodowanym st...
CVE-2025-52344MEDIUM6.1same product
Multiple Cross Site Scripting (XSS) vulnerabilities in input fields in Explorance Blue 8.1.2 allows attackers ...