Known vulnerabilities in Express Invoice
Vendor:
NCH Software
Software:
Express Invoice
Software CPE:
cpe:2.3:a:nch_software:express_invoice:*:*:*:*:*:*:*:*
Website:
https://www.nchsoftware.com/
Total vulnerabilities:
3
Public exploits:
2
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
13.01
13.00
12.16
12.15
12.13
12.10
12.09
12.05
12.04
12.03
12.02
12.01
12.00
11.28
11.27
11.25
11.22
11.21
11.20
11.18
11.17
11.15
11.14
11.13
11.10
11.09
11.06
11.05
11.04
11.03
11.02
11.00
10.39
10.38
10.37
10.36
10.35
10.34
10.33
10.30
10.23
10.22
10.21
10.19
10.17
10.15
10.11
10.04
10.03
10.00
9.55
9.53
9.52
9.49
9.48
9.47
9.46
9.43
9.38
9.30
9.24
9.23
9.19
9.17
9.14
9.13
9.09
9.07
9.03
9.01
9.00
8.26
8.24
8.17
8.11
8.10
8.07
8.05
8.04
8.03
7.29
7.23
7.10
4.61
4.60
4.59
4.58
4.57
4.54
4.21
4.00
3.68
3.67
3.66
3.65
3.64
3.63
3.60
3.58
3.57
3.56
3.51
3.49
3.46
3.44
3.43
3.42
8.02
8.00
7.34
7.33
7.32
7.31
7.28
7.25
7.24
7.22
7.20
7.19
7.18
7.17
7.16
7.12
7.09
7.08
7.04
7.03
7.02
7.01
7.00
6.11
6.10
6.09
6.08
6.07
6.06
6.04
6.03
6.02
6.01
6.00
5.05
5.04
5.03
5.02
5.01
5.00
4.65
4.64
4.62
4.53
4.50
4.49
4.48
4.46
4.45
4.44
4.43
4.41
4.40
4.39
4.38
4.37
4.36
4.35
4.34
4.33
4.32
4.28
4.27
4.26
4.25
4.24
4.22
4.20
4.15
4.14
4.13
4.12
4.11
4.10
4.08
4.07
4.06
4.05
4.04
3.99
3.98
3.93
3.92
3.91
3.90
3.89
3.88
3.87
3.86
3.84
3.83
3.82
3.81
3.80
3.79
3.77
3.76
3.75
3.71
3.70
3.69
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU34530 - Insufficiently Protected Credentials CVE-2020-11560 |
CWE-522 | Low | - | 07.04.2020 |
SB2020040754 |
||
| #VU34531 - Improper Privilege Management CVE-2020-11561 |
CWE-269 | High | - | 07.04.2020 |
SB2020040754 |
||
| #VU21795 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-16282 |
CWE-79 | Low | - | 15.10.2019 |
SB2019101508 |