CVEs (2)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Nchsoftware 1Express Accounts Jun 17, 2026 Dec 28, 2020 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 In NCH Express Accounts 8.24 and earlier, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as Add/Edit users. |
NCH Express Accounts 8.24 and earlier allows local users to discover the cleartext password by reading the configuration file. |