Insite Software Vulnerabilities and Affected Products
Vulnerabilities associated with Infor Storefront B2B.
Products
Clear product- Infor Storefront B2B1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2020-37033HIGH | Infor Storefront B2B 1.0 - 'usr_name' SQL InjectionInfor Storefront B2B 1.0 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'usr_name' parameter in login requests. Attackers can exploit the vulnerability by injecting malicious SQL code into the 'usr_name' parameter to potentially extract or modify database information. CWE-89Jan 30, 2026 | CVSS8.8v4.0 | EPSS0.362% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |