Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: Explorance Clear all filters
TI-2025-35679 CVE-2025-57796 · GHSA-cc53-w5wm-253v

Use of a hardcoded static key to protect sensitive data in Explorance Blue

Priority LOW 29

Explorance Blue versions prior to 8.14.12 use reversible symmetric encryption with a hardcoded static key to protect sensitive data, including user passwords and system configurations.

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00208 Published 2026-01-28 Fixed in 8.14.12 CWE-257
TI-2025-35678 CVE-2025-57795 · GHSA-2646-g369-4jgh

Unauthenticated Remote File Download in Explorance Blue

Priority MEDIUM 44

Explorance Blue versions prior to 8.14.13 contain an authenticated remote file download vulnerability in a web service component.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00626 Published 2026-01-28 Fixed in 8.14.13 CWE-434
TI-2025-35677 CVE-2025-57794 · GHSA-hj7x-r6cx-rqqh

Unrestricted File Upload Vulnerability in Explorance Blue

Priority MEDIUM 42

Explorance Blue versions prior to 8.14.9 contain an authenticated unrestricted file upload vulnerability in the administrative interface.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00638 Published 2026-01-28 Fixed in 8.14.9 CWE-434
TI-2025-35675 CVE-2025-57792 · GHSA-54f4-9j4c-c7x8

SQL Injection Vulnerability in Explorance Blue

Priority MEDIUM 49

Explorance Blue versions prior to 8.14.9 contain a SQL injection vulnerability caused by insufficient validation of user input in a web application endpoint.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00439 Published 2026-01-28 Fixed in 8.14.9 CWE-89
TI-2025-35676 CVE-2025-57793 · GHSA-2px4-jf33-3273

SQL Injection Vulnerability in Explorance Blue

Priority MEDIUM 43

Explorance Blue versions prior to 8.14.9 contain a SQL injection vulnerability caused by insufficient validation of user-supplied input in a web application component.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00365 Published 2026-01-28 Fixed in 8.14.9 CWE-89
TI-2025-32533 CVE-2025-52344 · GHSA-cgcx-37wj-87f8

Multiple Cross Site Scripting (XSS) vulnerabilities in input fields in Explorance Blue…

Priority MEDIUM 60

Multiple Cross Site Scripting (XSS) vulnerabilities in input fields in Explorance Blue 8.1.2 allows attackers to inject arbitrary JavaScript code on the user's browser via the Group name and Project Description input fie…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00327 Published 2025-09-15 No fix listed CWE-79