How many stanford corenlp CVEs are in CISA KEV?

None of stanford corenlp's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for stanford corenlp vulnerabilities?

Yes — 1 of stanford corenlp's CVEs have a known public exploit.

Which versions of stanford corenlp are affected?

9 distinct stanford corenlp versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in stanford corenlp CVEs?

stanford corenlp's CVEs most often map to these CWE weakness types: CWE-611 (Improper Restriction of XML External Entity Reference).

How many critical stanford corenlp vulnerabilities are there?

stanford corenlp has 3 critical and 2 high-severity CVEs.

What is the average severity of stanford corenlp CVEs?

The average CVSS base score across stanford corenlp's scored CVEs is 8.8.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

stanford

5 CVEs

stanford corenlp Vulnerabilities

Name: stanford corenlp vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for corenlp by stanford.

5

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

8.8

Avg CVSS

2021–2022

Last updated February 23, 2022

Overview

stanford corenlp has 5 published CVE records since 2021, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 8.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting stanford corenlp, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of stanford corenlp's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical3

High2

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of stanford corenlp's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of stanford corenlp's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every stanford corenlp version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 4.3.11 CVE
< 4.3.31 CVE
< 4.4.01 CVE
<= 4.3.01 CVE
<= 4.3.21 CVE
4.3.2 <= v <= 4.3.21 CVE

Fixed in

4.3.11 CVE
4.3.31 CVE
4.4.01 CVE

Find a version

5 CVEs

Sort

Critical vulnerability · 2022-02-23
CVE-2021-44550
Patch
Critical · CVSS 9.8
EPSS 1.3% (67th pct)2022-02-23
Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp
CVE-2022-0239
Public exploit
Patch
CWE-611
Critical · CVSS 9.8
EPSS 1.2% (65th pct)2022-01-17
High vulnerability · 2022-01-13
CVE-2022-0198
Patch
CWE-611
High · CVSS 7.1
EPSS 0.7% (51th pct)2022-01-13
High vulnerability · 2021-10-19
CVE-2021-3869
Patch
CWE-611
High · CVSS 7.5
EPSS 1.3% (68th pct)2021-10-19
Critical vulnerability · 2021-10-15
CVE-2021-3878
Patch
CWE-611
Critical · CVSS 9.8
EPSS 1.8% (77th pct)2021-10-15

Common weakness types

The CWE weakness categories most often found in stanford corenlp CVEs. Follow any weakness for its full explanation.

CWE-611Improper Restriction of XML External Entity Reference4 CVEs

Disclosure activity by year

How many stanford corenlp CVEs were published each year.

2021

2

2022

3

Other stanford products

Browse vulnerabilities for other products by stanford.

webauth2 CVEs stanford parser1 CVEs stanza1 CVEs

All stanford vulnerabilities

Frequently asked questions

Common questions about stanford corenlp vulnerabilities.

How many CVEs does stanford corenlp have?: stanford corenlp has 5 published CVE records since 2021.
How many stanford corenlp CVEs are in CISA KEV?: None of stanford corenlp's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for stanford corenlp vulnerabilities?: Yes — 1 of stanford corenlp's CVEs have a known public exploit.
Which versions of stanford corenlp are affected?: 9 distinct stanford corenlp versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in stanford corenlp CVEs?: stanford corenlp's CVEs most often map to these CWE weakness types: CWE-611 (Improper Restriction of XML External Entity Reference).
How many critical stanford corenlp vulnerabilities are there?: stanford corenlp has 3 critical and 2 high-severity CVEs.
What is the average severity of stanford corenlp CVEs?: The average CVSS base score across stanford corenlp's scored CVEs is 8.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track stanford corenlp vulnerabilities

Monitor new stanford corenlp vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing