Infor records
5 published records for vendor infor.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-321 Use of Hard-coded Cryptographic Key1
The weakness classes this vendor ships most often: where to look.
CWEAll records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2017-7952Proof of concept | INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter.infor · enterprise asset management · CWE-89 | High8.8 | — | 1.4% | May 16, 2017 |
31Monitor | CVE-2026-2103No exploit | Use of Hard-Coded Cryptographic Key for Password Storageinfor · syteline erp · CWE-321 | High7.8 | — | 0.1% | Feb 6, 2026 |
30Monitor | CVE-2011-1915No exploit | SQL injection vulnerability in eClient 7.3.2.3 in Enspire Distribution Management Solution 7.3.2.7 allows remote attackers to execute arbitrinfor · eclient · CWE-89 | High7.5 | — | 1.1% | Nov 1, 2011 |
24Monitor | CVE-2024-51423No exploit | Cross Site Scripting vulnerability in Infor Global HR GHR v.11.23.03.00.21 and before allows a remote attacker to execute arbitrary code viainfor · global human resources · CWE-79 | Medium6.1 | — | 0.3% | Sep 2, 2025 |
21Monitor | CVE-2017-7953Proof of concept | INFOR EAM V11.0 Build 201410 has XSS via comment fields.infor · enterprise asset management · CWE-79 | Medium5.4 | — | 0.9% | May 16, 2017 |
- CVE-2017-795235Monitor
INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter.
HighCVSS 8.8Proof of conceptEPSS 1%infor · enterprise asset managementMay 16, 2017
- CVE-2026-210331Monitor
Use of Hard-Coded Cryptographic Key for Password Storage
HighCVSS 7.8No exploitEPSS 0%infor · syteline erpFeb 6, 2026
- CVE-2011-191530Monitor
SQL injection vulnerability in eClient 7.3.2.3 in Enspire Distribution Management Solution 7.3.2.7 allows remote attackers to execute arbitr
HighCVSS 7.5No exploitEPSS 1%infor · eclientNov 1, 2011
- CVE-2024-5142324Monitor
Cross Site Scripting vulnerability in Infor Global HR GHR v.11.23.03.00.21 and before allows a remote attacker to execute arbitrary code via
MediumCVSS 6.1No exploitEPSS 0%infor · global human resourcesSep 2, 2025
- CVE-2017-795321Monitor
INFOR EAM V11.0 Build 201410 has XSS via comment fields.
MediumCVSS 5.4Proof of conceptEPSS 0%infor · enterprise asset managementMay 16, 2017