Nchsoftware

Records34All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Nchsoftware records in CISA KEV

No Nchsoftware vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Axon Pbx 10 records LOW Quorum 8 records LOW Ivm Attendant 7 records MEDIUM Express Invoice 4 records MEDIUM Express Accounts 2 records LOW Express Accounts Accounting 1 record LOW Meo Encryption Software 1 record LOW Webdictate 1 record LOW

Records

2 records in Express Accounts · all components

TI-2020-10568 CVE-2020-13474 · GHSA-3pjh-8rj7-xm2h

In NCH Express Accounts 8.24 and earlier, an authenticated low-privilege user can enter a…

LOW 30

In NCH Express Accounts 8.24 and earlier, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as Add/Edit users.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00755 Published 2020-12-28 No fix listed CWE-425

TI-2020-10567 CVE-2020-13473 · GHSA-4328-wgfc-675c

NCH Express Accounts 8.24 and earlier allows local users to discover the cleartext…

LOW 25

NCH Express Accounts 8.24 and earlier allows local users to discover the cleartext password by reading the configuration file.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00289 Published 2020-12-28 No fix listed CWE-312

Open these records in search →

Critical	0
High	5
Medium	29
Low	0
No CVSS	0