CVE-2017-7952 INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter.

HighCVSS 8.8 EPSS 1.4% Public exploit

Published: 2017-05-16 13:00
Updated: 2026-06-17 04:25
Exploit status: Public exploit available

Sign in for asset impact Search another CVE

Description

INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter.

Affected products

Product	Affected versions	Fixed in
Infor enterprise asset management	= 11.0_build_201410	No fix listed

References

seclists.org exploit mailing-list third-party-advisory
42028 exploit

CVSS v3.0

8.8 High

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector: Network
Attack Complexity: Low
Privileges Required: Low
User Interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

All scores (2)

v3.0 8.8 · nvd@nist.gov
v2.0 6.5 · nvd@nist.gov

Weakness & likelihood

EPSS (exploitation probability, 30 days): 1.44% (percentile 73.6)
CWE: CWE-89

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

INFOR EAM 11.0 Build 201410 - 'filtervalue' SQL Injection Exploit · Exploit Database (OffSec) · 2017-05-17