CVE-2025-60931

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

An Insecure Direct Object Reference (IDOR) in the Employee Compensation View function of Infor Global HR v11.24.10.01.33 allows unauthorized attackers to arbitrarily view the compensation information of other employees via a crafted GET request.

Published 2026-07-29. Last modified 2026-10-05.