Infor

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Infor records in CISA KEV

No Infor vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Enterprise Asset Management · all components

TI-2017-05560 CVE-2017-7952 · GHSA-38hj-4492-g88q

MEDIUM 41

INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01443 Published 2017-05-16 No fix listed CWE-89

TI-2017-05561 CVE-2017-7953 · GHSA-5cm2-g3j8-28r2

LOW 26

INFOR EAM V11.0 Build 201410 has XSS via comment fields.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00954 Published 2017-05-16 No fix listed CWE-79