CVE-2025-57795
BaseFortify
Publication date: 2026-01-28
Last updated on: 2026-02-05
Assigner: Mandiant Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| explorance | blue | to 8.14.13 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-434 | The product allows the upload or transfer of dangerous file types that are automatically processed within its environment. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in Explorance Blue versions prior to 8.14.13 and involves an authenticated remote file download flaw in a web service component. In default configurations, an attacker with valid credentials can exploit this flaw to download files remotely, which can lead to remote code execution on the affected system.
How can this vulnerability impact me? :
The vulnerability can have severe impacts including allowing an attacker to execute arbitrary code remotely on the affected system. This can lead to full compromise of the system, data theft, service disruption, or further attacks within the network.