CVE-2025-60931

high

Description

An Insecure Direct Object Reference (IDOR) in the Employee Compensation View function of Infor Global HR v11.24.10.01.33 allows unauthorized attackers to arbitrarily view the compensation information of other employees via a crafted GET request.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-210526

https://docs.offsecguy.com/cve/infor/vulnerability/insecure-direct-object-references-idor

Details

Source: Mitre, NVD

Published: 2026-07-29

Updated: 2026-10-12

Risk Information

CVSS v2

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N