Infor

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Infor records in CISA KEV

No Infor vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Enterprise Asset Management 2 records MEDIUM Eclient 1 record LOW Enspire Distribution Management Solution 1 record LOW Global Human Resources 1 record MEDIUM Syteline Erp 1 record HIGH

Records

5 records

TI-2026-01756 CVE-2026-2103 · GHSA-5q75-fhmp-pjmr

Use of Hard-Coded Cryptographic Key for Password Storage

HIGH 67

Infor SyteLine ERP uses hard-coded static cryptographic keys to encrypt stored credentials, including user passwords, database connection strings, and API keys.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00108 Published 2026-02-06 No fix listed CWE-321

TI-2024-34361 CVE-2024-51423 · GHSA-x9vv-qvqx-3jf3

Cross Site Scripting vulnerability in Infor Global HR GHR v.11.23.03.00.21 and before…

MEDIUM 60

Cross Site Scripting vulnerability in Infor Global HR GHR v.11.23.03.00.21 and before allows a remote attacker to execute arbitrary code via the class parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00324 Published 2025-09-02 No fix listed CWE-79

TI-2017-05560 CVE-2017-7952 · GHSA-38hj-4492-g88q

INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter.

MEDIUM 41

INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01443 Published 2017-05-16 No fix listed CWE-89

TI-2011-01689 CVE-2011-1915 · GHSA-c965-qc2m-fc59

SQL injection vulnerability in eClient 7.3.2.3 in Enspire Distribution Management…

LOW 35

SQL injection vulnerability in eClient 7.3.2.3 in Enspire Distribution Management Solution 7.3.2.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01104 Published 2011-11-01 No fix listed CWE-89

TI-2017-05561 CVE-2017-7953 · GHSA-5cm2-g3j8-28r2

INFOR EAM V11.0 Build 201410 has XSS via comment fields.

LOW 26

INFOR EAM V11.0 Build 201410 has XSS via comment fields.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00954 Published 2017-05-16 No fix listed CWE-79

Open these records in search →

Critical	0
High	3
Medium	2
Low	0
No CVSS	0