CVE-2025-60931 in Global HR

Sumário

de MITRE • 29/07/2026

An Insecure Direct Object Reference (IDOR) in the Employee Compensation View function of Infor Global HR v11.24.10.01.33 allows unauthorized attackers to arbitrarily view the compensation information of other employees via a crafted GET request.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsável: MITRE
• Reservar: 26/09/2025
• Divulgação: 29/07/2026
• Moderação: aceite
• Entrada: VDB-384213
• CPE: pronto
• CWE: CWE-99 (confirmado)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00000
• KEV: não
• Atividades: baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-60931
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-60931
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-60931/