CVE-2023-4537: Comarch ERP Xl

High severity, CVSS 7.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Comarch ERP XL client is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unencrypted communication vulnerable to data interception and modification. This issue affects ERP XL: from 2020.2.2 through 2023.2.

Affected products

• Comarch ERP Xl: from 2020.2.2, up to and including 2023.2

Published 2024-02-15. Last modified 2026-06-17.