Auth bypass in N/a
CVE-2025-60931
An Insecure Direct Object Reference (IDOR) in the Employee Compensation View function of Infor Global HR v11.24.10.01.33 allows unauthorized attackers to arbitrarily view the compensation information of other employees via a crafted GET re…
Vulnerability class: IDOR (Insecure Direct Object Reference)
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- N/a — versions n/a
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-60931?
- CVE-2025-60931 is a high-severity vulnerability in N/a, classified under Authorization Bypass Through User-Controlled Key. CVSS score: 7.5/10. Published 2026-07-29.
- How severe is CVE-2025-60931?
- High severity. CVSS v3 base score is 7.5 out of 10.