TI-2020-19168 CVE-2020-37033 · GHSA-c29q-cq44-p25pInfor Storefront B2B 1.0 - 'usr_name' SQL InjectionPriority HIGH 77Infor Storefront B2B 1.0 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'usr_name' parameter in login requests.CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00402 · Published 2026-01-30 · No fix listed CWE-89