Infor

infor

5 CVEs • 5 products

Products (5)

Click to collapse

Toggle

Enterprise Asset Management

enterprise_asset_management

Enspire Distribution Management Solution

enspire_distribution_management_solution

Global Human Resources

global_human_resources

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-2103 1Infor 1Syteline Erp Jun 17, 2026 Feb 6, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Infor SyteLine ERP uses hard-coded static cryptographic keys to encrypt stored credentials, including user passwords, database connection strings, and API keys. The encryption keys are identical across all installations....Show more Infor SyteLine ERP uses hard-coded static cryptographic keys to encrypt stored credentials, including user passwords, database connection strings, and API keys. The encryption keys are identical across all installations. An attacker with access to the application binary and database can decrypt all stored credentials.Show less
CVE-2024-51423 1Infor 1Global Human Resources Jun 17, 2026 Sep 2, 2025 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Cross Site Scripting vulnerability in Infor Global HR GHR v.11.23.03.00.21 and before allows a remote attacker to execute arbitrary code via the class parameter.
CVE-2017-7953 1Infor 1Enterprise Asset Management May 13, 2026 May 16, 2017 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 INFOR EAM V11.0 Build 201410 has XSS via comment fields.
CVE-2017-7952 1Infor 1Enterprise Asset Management May 13, 2026 May 16, 2017 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter.
CVE-2011-1915 1Infor 2Eclient Enspire Distribution Management Solution Apr 29, 2026 Nov 1, 2011 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in eClient 7.3.2.3 in Enspire Distribution Management Solution 7.3.2.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.