Infor kayıtları
infor üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-321 Use of Hard-coded Cryptographic Key1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2017-7952Kavram kanıtı | INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter.infor · enterprise asset management · CWE-89 | Yüksek8,8 | — | %1,4 | 16 May 2017 |
31İzleyin | CVE-2026-2103İstismar yok | Use of Hard-Coded Cryptographic Key for Password Storageinfor · syteline erp · CWE-321 | Yüksek7,8 | — | %0,1 | 6 Şub 2026 |
30İzleyin | CVE-2011-1915İstismar yok | SQL injection vulnerability in eClient 7.3.2.3 in Enspire Distribution Management Solution 7.3.2.7 allows remote attackers to execute arbitrinfor · eclient · CWE-89 | Yüksek7,5 | — | %1,1 | 1 Kas 2011 |
24İzleyin | CVE-2024-51423İstismar yok | Cross Site Scripting vulnerability in Infor Global HR GHR v.11.23.03.00.21 and before allows a remote attacker to execute arbitrary code viainfor · global human resources · CWE-79 | Orta6,1 | — | %0,3 | 2 Eyl 2025 |
21İzleyin | CVE-2017-7953Kavram kanıtı | INFOR EAM V11.0 Build 201410 has XSS via comment fields.infor · enterprise asset management · CWE-79 | Orta5,4 | — | %1,0 | 16 May 2017 |
- CVE-2017-795235İzleyin
INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter.
YüksekCVSS 8,8Kavram kanıtıEPSS %1infor · enterprise asset management16 May 2017
- CVE-2026-210331İzleyin
Use of Hard-Coded Cryptographic Key for Password Storage
YüksekCVSS 7,8İstismar yokEPSS %0infor · syteline erp6 Şub 2026
- CVE-2011-191530İzleyin
SQL injection vulnerability in eClient 7.3.2.3 in Enspire Distribution Management Solution 7.3.2.7 allows remote attackers to execute arbitr
YüksekCVSS 7,5İstismar yokEPSS %1infor · eclient1 Kas 2011
- CVE-2024-5142324İzleyin
Cross Site Scripting vulnerability in Infor Global HR GHR v.11.23.03.00.21 and before allows a remote attacker to execute arbitrary code via
OrtaCVSS 6,1İstismar yokEPSS %0infor · global human resources2 Eyl 2025
- CVE-2017-795321İzleyin
INFOR EAM V11.0 Build 201410 has XSS via comment fields.
OrtaCVSS 5,4Kavram kanıtıEPSS %1infor · enterprise asset management16 May 2017