Vulnerabilities > Comarch
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-02-15 | CVE-2023-4538 | Insufficiently Protected Credentials vulnerability in Comarch ERP XL The database access credentials configured during installation are stored in a special table, and are encrypted with a shared key, same among all Comarch ERP XL client installations. | 6.5 |
| 2024-02-15 | CVE-2023-4539 | Use of Hard-coded Credentials vulnerability in Comarch ERP XL Use of a hard-coded password for a special database account created during Comarch ERP XL installation allows an attacker to retrieve embedded sensitive data stored in the database. | 7.5 |