CVE-2025-57795

Explorance Blue, a learning experience management software, contains an authenticated remote file download vulnerability in its web service component in versions prior to 8.14.13 . This flaw allows an authenticated attacker to leverage the vulnerability to achieve remote code execution (RCE) unde...

CVE-2025-57794

Explorance Blue versions prior to 8.14.9 are vulnerable to an authenticated unrestricted file upload vulnerability within the administrative interface. The software fails to adequately restrict uploaded file types, which allows an attacker to upload and execute malicious files on the server. This...

CVE-2025-57796

Explorance Blue versions prior to 8.14.12 are vulnerable to the decryption of sensitive data due to the use of reversible symmetric encryption with a hardcoded static key . This security flaw affects the protection of sensitive information, specifically including user passwords and system configu...

CVE-2025-57792

Explorance Blue versions prior to 8.14.9 are vulnerable to a SQL injection flaw due to insufficient validation of user input in a web application endpoint. An unauthenticated attacker can provide crafted input that is executed within backend database queries. No specific remediation steps or expl...

CVE-2025-57793

Explorance Blue versions prior to 8.14.9 are vulnerable to a SQL injection vulnerability caused by insufficient validation of user-supplied input within a web application component. An unauthenticated attacker can provide crafted input that is executed as part of backend database queries, potenti...