stanfordnlp

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

stanfordnlp records in CISA KEV

No stanfordnlp vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records in Corenlp · all components

TI-2022-00175 CVE-2022-0239 · GHSA-75vw-3m5v-fprh

HIGH 82

corenlp is vulnerable to Improper Restriction of XML External Entity Reference

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01217 Published 2022-01-17 Fixed in 4.3.3, 4.4.0 CWE-611

TI-2021-02801 CVE-2021-3878 · GHSA-5h9g-8xcv-qjq9

MEDIUM 46

corenlp is vulnerable to Improper Restriction of XML External Entity Reference

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01886 Published 2021-10-15 Fixed in 4.3.1 CWE-611

TI-2021-20146 CVE-2021-44550 · GHSA-x2p8-rgfm-qw3v

MEDIUM 45

An Incorrect Access Control vulnerability exists in CoreNLP 4.3.2 via the classifier in NERServlet.java (lines 158 and 159).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01294 Published 2022-02-23 Fixed in 4.4.0 CWE-74

TI-2021-02797 CVE-2021-3869 · GHSA-8gf7-w3cp-gfh3

LOW 36

corenlp is vulnerable to Improper Restriction of XML External Entity Reference

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0136 Published 2021-10-19 Fixed in 4.3.1 CWE-611

TI-2022-00136 CVE-2022-0198 · GHSA-mh83-jcw5-rjh8

LOW 33

corenlp is vulnerable to Improper Restriction of XML External Entity Reference

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00763 Published 2022-01-13 Fixed in 4.3.3 CWE-611