> For the complete documentation index, see [llms.txt](https://docs.offsecguy.com/cve/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.offsecguy.com/cve/infor/vulnerability.md).

# Vulnerability

- [Reflected XSS](https://docs.offsecguy.com/cve/infor/vulnerability/reflected-xss.md): Infor Global HR v11.23.03.00.21 and prior is affected by Reflected XSS (AKA Non-Persistent or Type I) vulnerability.
- [Insecure direct object references (IDOR)](https://docs.offsecguy.com/cve/infor/vulnerability/insecure-direct-object-references-idor.md): Infor Global HR 11.24.10.01.33 and prior are affected by an Insecure Direct Object Reference (IDOR) vulnerability.