Natural Language Processing

natural_language_processing

Vendor: Eigentech • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-38617 1Eigentech 1Natural Language Processing Jun 17, 2026 Sep 7, 2021 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/ user creation endpoint allows a standard user to create a super user account with a defined password. This directly leads to privilege escalation.
CVE-2021-38616 1Eigentech 1Natural Language Processing Jun 17, 2026 Sep 7, 2021 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/{user-guid}/ user edition endpoint could permit any logged-in user to increase their own permissions via a user_permissions array in a PATCH request. A g...Show more In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/{user-guid}/ user edition endpoint could permit any logged-in user to increase their own permissions via a user_permissions array in a PATCH request. A guest user could modify other users' profiles and much more.Show less
CVE-2021-38615 1Eigentech 1Natural Language Processing Jun 17, 2026 Sep 7, 2021 N/A· v4 8.1 HIGH· v3 5.5 MEDIUM· v2 In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/sso/config/ SSO configuration endpoint allows any logged-in user (guest, standard, or admin) to view and modify information.