Natural Language Processing (Eigentech) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2021-09-07. Vendor: Eigentech.

CVEs of Natural Language Processing

• CVE-2021-38617 - CVSS 8.8 (high), 2021-09-07: In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/ user creation endpoint allows a standard user to create a super user account with a…
• CVE-2021-38616 - CVSS 8.8 (high), 2021-09-07: In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/{user-guid}/ user edition endpoint could permit any logged-in user to increase their own…
• CVE-2021-38615 - CVSS 8.1 (high), 2021-09-07: In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/sso/config/ SSO configuration endpoint allows any logged-in user (guest, standard, or admin) to…