CVE-2025-57792: Explorance Blue SQL Injection Vulnerability
Explorance Blue versions prior to 8.14.9 contain an SQL injection weakness (CWE-89) caused by insufficient validation of user input in a web application endpoint. The record states the flaw can be exploited without authentication and is rated critical with a CVSS 3.1 base score of 10.0. No confirmed exploitation appears in the sources consulted, and the record does not show the vulnerability in the CISA KEV catalog.
Overview
Explorance Blue versions prior to 8.14.9 are affected by an SQL injection weakness classified as CWE-89. According to the record, insufficient validation of user input in a web application endpoint allows crafted input to reach backend database queries. The record rates the issue critical with a CVSS 3.1 base score of 10.0.
Impact
- The CVSS 3.1 vector in the record indicates a network attack vector, low complexity, no privileges required, no user interaction, a changed scope, and high confidentiality, integrity and availability impacts.
- Because the weakness lies in how backend queries are built, a successful attack could plausibly expose, modify or disrupt database content and the application that depends on it. This is an inference from the weakness class and the vector, not a documented outcome.
Affected Products and Versions
- Explorance Blue, versions less than 8.14.9, as listed in the record.
- The record does not list a separate fixed version. The boundary of the affected range, 8.14.9, is the only version reference available.
Exploitation Status
The CISA KEV catalog does not list this CVE in the record, so it cannot be described as actively exploited in the wild based on the available data. No confirmed exploitation appears in the sources consulted. No EPSS score is available in the record.
Remediation and Mitigation
- Review the vendor security advisories linked in the record and confirm the version installed in each Explorance Blue deployment.
- Plan an upgrade to version 8.14.9 or later, since the record places that version at the boundary of the affected range. Confirm the exact fixed build with the vendor before relying on it.
- Where patching cannot happen immediately, reduce exposure by limiting network access to the affected web interface to trusted users and networks.
- Ask the vendor for guidance on input handling and any interim configuration options.
Detection Guidance
- Review web server and application logs for unusual request patterns directed at Blue endpoints, and for database error messages that appear in responses or logs.
- Monitor database activity for queries that deviate from normal application behavior, such as unexpected schema access or unusual volumes of reads.
- Correlate alerts from web application firewalls or intrusion detection tools with application and database logs to speed up triage.
Limitations of the Available Information
- The record does not identify the specific vulnerable endpoint or parameter, and this analysis does not describe one.
- The fixes list in the record is empty, so the fixed version is not confirmed by a structured field.
- No EPSS score, SSVC decision or confirmed exploitation data is present in the record.
- Vendor advisory content was not reproduced here; consult the linked advisories for authoritative remediation details.
Frequently asked questions
Which Explorance Blue versions are affected by CVE-2025-57792?
The record lists Explorance Blue versions less than 8.14.9 as affected. Check your installed version against that boundary and review the vendor advisories for confirmed details.
Is CVE-2025-57792 known to be actively exploited?
The record shows the CVE is not listed in the CISA KEV catalog, and no confirmed exploitation appears in the sources consulted. Continue monitoring vendor and government sources for updates.
This analysis was drafted with AI assistance from verified source data and automatically checked against it.