PatchTheCVEexpress accounts vulnerabilities and fixes
Recent CVEs affecting express accounts, with upgrade or downgrade steps. 2 tracked.
Also searched as: expressaccounts.
express accounts has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2020-12-28. Highest priority: CVE-2020-13474 (score 42/100).
- CVE-2020-13474 MEDIUM 6.5 UPGRADE In NCH Express Accounts 8.24 and earlier, an authenticated low-privilege user can enter a crafted URL to acces
- CVE-2020-13473 MEDIUM 5.5 UPGRADE NCH Express Accounts 8.24 and earlier allows local users to discover the cleartext password by reading the con
FAQ
How do I fix express accounts vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is express accounts being exploited right now?
None of the tracked express accounts CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which express accounts CVE should I patch first?
CVE-2020-13474 currently ranks highest (42/100): In NCH Express Accounts 8.24 and earlier, an authenticated low-privilege user can enter a crafted URL to acces.