Core Financial Systems is aware of the recently disclosed security vulnerabilities affecting PHP and has been reviewing the potential impact across the solutions we provide.
Based on the information currently available, we can provide the following update for customers.
Infor SunSystems and Query & Analysis
Infor has confirmed that the technology referenced in the reported PHP security vulnerabilities is not currently, nor has it historically been, used within SunSystems or Query & Analysis.
Based on the information available, Infor has no indication of exposure or impact to SunSystems or Query & Analysis and will continue to monitor developments.
Infor customers can also refer to Knowledge Base article KB3714197 – PHP Cyber Security Threat for further information through the Infor Customer Portal.
Infor EPM
Infor has confirmed that Infor EPM does not use PHP and is built on Microsoft .NET technology. The reported PHP vulnerabilities therefore do not apply to the EPM application itself.
For Infor EPM Cloud, security of the underlying platform is managed by Infor and no customer action is required.
Organisations with on-premise environments should review whether any third-party applications or websites within their wider environment depend on PHP. Where PHP is present for another purpose, the relevant provider guidance should be followed and appropriate PHP security updates applied.
Core EBF / WMS applications
Our current assessment confirms that EBF does not use PHP and therefore we do not expect the reported vulnerabilities to impact Core’s EBF applications.
We are continuing to review the situation as a precaution.
What should customers do?
Based on the assessments received to date, there is no specific action required in relation to the PHP vulnerabilities for Infor SunSystems, Query & Analysis or Infor EPM Cloud.
Customers operating EPM on-premise should check whether PHP is installed elsewhere on the relevant servers for purposes unrelated to EPM and, if so, ensure the latest PHP security updates are applied in line with Infor’s guidance.
We will continue to monitor developments
Core Financial Systems will continue to monitor the situation and relevant vendor guidance. If there are any material changes affecting the solutions we provide, we will communicate these to customers as appropriate.
If you have questions about your specific environment, please contact your Core Account Manager or the Core Support team.
Have a question about your environment?
If you have any concerns about how the recent security vulnerabilities may affect your Core or Infor solutions, please contact our Support team.