What is the CVSS score of CVE-2025-57793?

CVE-2025-57793 has a CVSS 3.1 base score of 8.6 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N. EPSS exploitation probability: 0.1%.

Which versions of Blue are affected by CVE-2025-57793?

Explorance Blue deployments running versions before 8.14.9 are vulnerable to SQL injection attacks that could allow unauthorized database access and data exfiltration.

How to fix or mitigate CVE-2025-57793?

Within 24 hours: Identify all Explorance Blue instances and their versions; isolate affected systems from external networks if operationally feasible; contact Explorance support for patch availability timeline. Within 7 days: Deploy WAF rules to block SQL injection patterns targeting Explorance Blue; implement database access monitoring and alerts; restrict database user permissions to least-privilege accounts. Within 30 days: Upgrade to patched version 8.14.9 or later; conduct database audit for unauthorized access indicators; review access logs for exploitation attempts.

Blue CVE-2025-57793

HIGH

SQL Injection (CWE-89)

2026-01-28 mandiant-cve@google.com

SQLi Blue Explorance

8.6

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.6 HIGH

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 28, 2026 - 18:16 nvd

HIGH 8.6

DescriptionCVE.org

Explorance Blue versions prior to 8.14.9 contain a SQL injection vulnerability caused by insufficient validation of user-supplied input in a web application component. Crafted input can be executed as part of backend database queries. The issue is exploitable without authentication, significantly elevating the risk.

AnalysisAI

Technical ContextAI

Classified as CWE-89 (SQL Injection). Affects the a web application component of Blue. Explorance Blue versions prior to 8.14.9 contain a SQL injection vulnerability caused by insufficient validation of user-supplied input in a web application component. Crafted input can be executed as part of backend database queries. The issue is exploitable without authentication, significantly elevating the risk.

RemediationAI

Monitor vendor advisories for a patch. Use parameterized queries. Implement input validation. Restrict network access to the affected service where possible.