CVE-2025-52344 in Blue

Resumen

por MITRE • 2025-09-15

Multiple Cross Site Scripting (XSS) vulnerabilities in input fields in Explorance Blue 8.1.2 allows attackers to inject arbitrary JavaScript code on the user's browser via the Group name and Project Description input fields.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsable: MITRE
• Reservar: 2025-06-16
• Divulgación: 2025-09-15
• Moderación: aceptado
• Artículo: VDB-324255
• CPE: listo
• CWE: CWE-79 (confirmado)
• CVSS: 3.5 (VulDB)
• EPSS: 0.00327
• KEV: no
• Actividades: muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-52344
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-52344
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-52344/