Comarch
5 CVEs across 3 Comarch products. Browse Comarch vulnerabilities, severities, and proof-of-concept exploits.
Comarch products with known CVEs
Comarch CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-68421 | | | 2026-05-14 | Comarch ERP Optima client makes use of a hard-coded password for a database user. These credentials cannot be changed. It is possible for a remote attacker to… |
CVE-2025-68420 | | | 2026-05-14 | Comarch ERP Optima client connects to a database using a high privileged account regardless of an application account to which a user logs in. It is possible f… |
CVE-2023-4539 | High | 7.5 | 2024-02-15 | Use of a hard-coded password for a special database account created during Comarch ERP XL installation allows an attacker to retrieve embedded sensitive data s… |
CVE-2023-4538 | Medium | 6.2 | 2024-02-15 | The database access credentials configured during installation are stored in a special table, and are encrypted with a shared key, same among all Comarch ERP X… |
CVE-2023-4537 | High | 7.4 | 2024-02-15 | Comarch ERP XL client is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unencrypted communication vulnerable to data… |