CVE-2025-60931

HIGH CVSS 7.5 View on NVD ↗

Description

An Insecure Direct Object Reference (IDOR) in the Employee Compensation View function of Infor Global HR v11.24.10.01.33 allows unauthorized attackers to arbitrarily view the compensation information of other employees via a crafted GET request.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

https://docs.offsecguy.com/cve/infor/vulnerability/insecure-direct-object-references-idor
https://docs.offsecguy.com/cve/infor/vulnerability/insecure-direct-object-references-idor

Published: Jul 29, 2026 17:16 UTC Modified: Jul 30, 2026 14:12 UTC