CVE-2025-57792

Status: AnalyzedCritical (10)—

Explorance Blue versions prior to 8.14.9 contain a SQL injection vulnerability caused by insufficient validation of user input in a web application endpoint. An attacker can supply crafted input that is executed as part of backend database queries. The issue is exploitable without authentication, significantly raising the risk.

CVSS

Version: 3.1
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Base score: 10

Exploitation probability (EPSS)

Probability of exploitation in the next 30 days: 0.44%
Percentile among all scored CVEs: 36
Score date: 10/4/2026

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

🎯 ATT&CK techniques

How this vulnerability is exploited and what the attacker gains, in MITRE ATT&CK terms.

ExploitationT1190 Exploit Public-Facing Applicationinitial access95 %
Primary impactT1005 Data from Local Systemcollection90 %
Secondary impactT1078 Valid Accountsstealth · persistence · privilege escalation · initial access75 %
Secondary impactT1565.001 Stored Data Manipulationimpact85 %

SQL injection sin autenticación en endpoint web (AV:N, PR:N, CWE-89). Impactos: lectura de datos sensibles (C:H), manipulación de BD (I:H), potencial acceso a cuentas administrativas.

Inferred by our analysis agent from the official description, CVSS vector and CWE, and checked by a supervisor. May contain errors.

🛡️ ATT&CK mitigations that cover these techniques

Privileged Account Management Application Developer Guidance Active Directory Configuration Vulnerability Scanning User Training User Account Management

Affected technologies (1)

Explorance — Blue

CWEs

CWE-89

References

Raw JSON (NVD)

Show

{
  "id": "CVE-2025-57792",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-57792",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-01-28T18:33:37.822537Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 10,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "mandiant-cve@google.com",
      "affectedData": [
        {
          "vendor": "Explorance",
          "product": "Blue",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "8.14.9",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2026-01-28T18:16:49.463",
  "references": [
    {
      "url": "https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0001.md",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "mandiant-cve@google.com"
    },
    {
      "url": "https://online-help.explorance.com/blue/articles/security-advisories-(january-2026)",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "mandiant-cve@google.com"
    },
    {
      "url": "https://online-help.explorance.com/blue/articles/security-advisory:-cve-2025-57792",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "mandiant-cve@google.com"
    },
    {
      "url": "https://www.explorance.com/products/blue",
      "tags": [
        "Product"
      ],
      "source": "mandiant-cve@google.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "mandiant-cve@google.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Explorance Blue versions prior to 8.14.9 contain a SQL injection vulnerability caused by insufficient validation of user input in a web application endpoint. An attacker can supply crafted input that is executed as part of backend database queries. The issue is exploitable without authentication, significantly raising the risk."
    },
    {
      "lang": "es",
      "value": "Versiones de Explorance Blue anteriores a la 8.14.9 contienen una vulnerabilidad de inyección SQL causada por la validación insuficiente de la entrada del usuario en un endpoint de aplicación web. Un atacante puede proporcionar una entrada manipulada que se ejecuta como parte de las consultas de base de datos de backend. El problema es explotable sin autenticación, lo que aumenta significativamente el riesgo."
    }
  ],
  "lastModified": "2026-06-17T09:43:26.527",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:explorance:blue:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D2AB6583-0303-48FA-B066-9CF5941EFE28",
              "versionEndExcluding": "8.14.9"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "mandiant-cve@google.com"
}