Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2023-4539

Use of a hard-coded password for a special database account created during Comarch ERP XL installation allows an attacker to retrieve embedded sensitive data stored in the database. The password is same among all Comarch ERP XL installations. This issue affects ERP XL: from 2020.2.2 through 2023.2.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 40.2%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2023-4539
  • Comarch » Erp Xl » Version: 2020.2.2
    cpe:2.3:a:comarch:erp_xl:2020.2.2
  • Comarch » Erp Xl » Version: 2022.0
    cpe:2.3:a:comarch:erp_xl:2022.0
  • Comarch » Erp Xl » Version: 2022.0.1
    cpe:2.3:a:comarch:erp_xl:2022.0.1
  • Comarch » Erp Xl » Version: 2022.0.2
    cpe:2.3:a:comarch:erp_xl:2022.0.2
  • Comarch » Erp Xl » Version: 2022.1
    cpe:2.3:a:comarch:erp_xl:2022.1
  • Comarch » Erp Xl » Version: 2023.0
    cpe:2.3:a:comarch:erp_xl:2023.0
  • Comarch » Erp Xl » Version: 2023.1
    cpe:2.3:a:comarch:erp_xl:2023.1
  • Comarch » Erp Xl » Version: 2023.2
    cpe:2.3:a:comarch:erp_xl:2023.2


Products
Pricing
Contact Us

Shodan ® - All rights reserved