Eigentech Natural Language Processing — known CVE vulnerabilities

Every CVE whose affected-product data names Eigentech Natural Language Processing, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2021-38617 — CVSS 8.8 (high): In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/ user creation endpoint allows a standard user to create a super user…
• CVE-2021-38616 — CVSS 7.6 (high): In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/{user-guid}/ user edition endpoint could permit any logged-in user to…
• CVE-2021-38615 — CVSS 6.3 (medium): In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/sso/config/ SSO configuration endpoint allows any logged-in user (guest…