Read the docs

Explorance

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Explorance records in CISA KEV

No Explorance vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Blue 6 records MEDIUM

Records

6 records

TI-2025-32533 CVE-2025-52344 · GHSA-cgcx-37wj-87f8

Multiple Cross Site Scripting (XSS) vulnerabilities in input fields in Explorance Blue…

Priority MEDIUM 60

Multiple Cross Site Scripting (XSS) vulnerabilities in input fields in Explorance Blue 8.1.2 allows attackers to inject arbitrary JavaScript code on the user's browser via the Group name and Project Description input fie…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00327 Published 2025-09-15 No fix listed CWE-79
TI-2025-35675 CVE-2025-57792 · GHSA-54f4-9j4c-c7x8

SQL Injection Vulnerability in Explorance Blue

Priority MEDIUM 49

Explorance Blue versions prior to 8.14.9 contain a SQL injection vulnerability caused by insufficient validation of user input in a web application endpoint.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00439 Published 2026-01-28 Fixed in 8.14.9 CWE-89
TI-2025-35678 CVE-2025-57795 · GHSA-2646-g369-4jgh

Unauthenticated Remote File Download in Explorance Blue

Priority MEDIUM 44

Explorance Blue versions prior to 8.14.13 contain an authenticated remote file download vulnerability in a web service component.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00626 Published 2026-01-28 Fixed in 8.14.13 CWE-434
TI-2025-35676 CVE-2025-57793 · GHSA-2px4-jf33-3273

SQL Injection Vulnerability in Explorance Blue

Priority MEDIUM 43

Explorance Blue versions prior to 8.14.9 contain a SQL injection vulnerability caused by insufficient validation of user-supplied input in a web application component.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00365 Published 2026-01-28 Fixed in 8.14.9 CWE-89
TI-2025-35677 CVE-2025-57794 · GHSA-hj7x-r6cx-rqqh

Unrestricted File Upload Vulnerability in Explorance Blue

Priority MEDIUM 42

Explorance Blue versions prior to 8.14.9 contain an authenticated unrestricted file upload vulnerability in the administrative interface.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00638 Published 2026-01-28 Fixed in 8.14.9 CWE-434
TI-2025-35679 CVE-2025-57796 · GHSA-cc53-w5wm-253v

Use of a hardcoded static key to protect sensitive data in Explorance Blue

Priority LOW 29

Explorance Blue versions prior to 8.14.12 use reversible symmetric encryption with a hardcoded static key to protect sensitive data, including user passwords and system configurations.

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00208 Published 2026-01-28 Fixed in 8.14.12 CWE-257
Open these records in search →