CVE-2023-4537

7.4 highEPSS 0.6%

High (7.4) in comarch erp xl. EPSS 0.6% chance of exploitation in the next 30 days.

Comarch ERP XL client is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unencrypted communication vulnerable to data interception and modification. This issue affects ERP XL: from 2020.2.2 through 2023.2.

Severity

CVSS 3.1

7.4 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWE: CWE-755
Published: 2024-02-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

comarch:erp_xl

References

https://cert.pl/en/posts/2024/02/CVE-2023-4537/
https://cert.pl/posts/2024/02/CVE-2023-4537/
https://cert.pl/en/posts/2024/02/CVE-2023-4537/
https://cert.pl/posts/2023/02/CVE-2023-4537/

Check your stack JSON