Corenlp

Source repositories

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2021-44550	Stanford Corenlp	Cri	0.57	9.8	0.01	Feb 24, 2022	An Incorrect Access Control vulnerability exists in CoreNLP 4.3.2 via the classifier in NERServlet.java (lines 158 and 159).
CVE-2022-0239	Stanford Corenlp	Cri	0.57	9.8	0.01	Jan 17, 2022	corenlp is vulnerable to Improper Restriction of XML External Entity Reference
CVE-2021-3878	Stanford Corenlp	Cri	0.57	9.8	0.02	Oct 15, 2021	corenlp is vulnerable to Improper Restriction of XML External Entity Reference
CVE-2021-3869	Stanford Corenlp	Hig	0.42	7.5	0.01	Oct 19, 2021	corenlp is vulnerable to Improper Restriction of XML External Entity Reference
CVE-2022-0198	Stanford Corenlp	Hig	0.39	7.1	0.01	Jan 13, 2022	corenlp is vulnerable to Improper Restriction of XML External Entity Reference

CVE-2021-44550CriFeb 24, 2022
Stanford
Corenlp
risk 0.57cvss 9.8epss 0.01
An Incorrect Access Control vulnerability exists in CoreNLP 4.3.2 via the classifier in NERServlet.java (lines 158 and 159).
CVE-2022-0239CriJan 17, 2022
Stanford
Corenlp
risk 0.57cvss 9.8epss 0.01
corenlp is vulnerable to Improper Restriction of XML External Entity Reference
CVE-2021-3878CriOct 15, 2021
Stanford
Corenlp
risk 0.57cvss 9.8epss 0.02
corenlp is vulnerable to Improper Restriction of XML External Entity Reference
CVE-2021-3869HigOct 19, 2021
Stanford
Corenlp
risk 0.42cvss 7.5epss 0.01
corenlp is vulnerable to Improper Restriction of XML External Entity Reference
CVE-2022-0198HigJan 13, 2022
Stanford
Corenlp
risk 0.39cvss 7.1epss 0.01
corenlp is vulnerable to Improper Restriction of XML External Entity Reference