Skip to content
OpenAdvisories

Product · Comarch

ERP Optima

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2025-68420

    Privilege Escalation in Comarch ERP Optima

    Comarch ERP Optima client connects to a database using a high privileged account regardless of an application account to which a user logs in. It is possible for a local attacker who controls the client process to dump it's memory, extract credentials and use…

    Comarch ERP Optima
  • High 8.7
    CVE-2025-68421

    Hardcoded credentials in Comarch ERP Optima

    Comarch ERP Optima client makes use of a hard-coded password for a database user. These credentials cannot be changed. It is possible for a remote attacker to gain an access to the database with elevated privileges including executing system commands on a ser…

    Comarch ERP Optima