Search Results (4 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-51423 1 Infor 1 Global Human Resources 2025-09-10 6.1 Medium
Cross Site Scripting vulnerability in Infor Global HR GHR v.11.23.03.00.21 and before allows a remote attacker to execute arbitrary code via the class parameter.
CVE-2017-7952 1 Infor 1 Enterprise Asset Management 2025-04-20 N/A
INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter.
CVE-2017-7953 1 Infor 1 Enterprise Asset Management 2025-04-20 N/A
INFOR EAM V11.0 Build 201410 has XSS via comment fields.
CVE-2011-1915 1 Infor 2 Eclient, Enspire Distribution Management Solution 2025-04-11 N/A
SQL injection vulnerability in eClient 7.3.2.3 in Enspire Distribution Management Solution 7.3.2.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.