PO
Product
Poi
10
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 5Low 0
Watch
Add Poi to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-12626 | 7.5 | Jan 29 | Apache POI in versions prior to release 3.17 are vulnerable to Denial of Service Attacks: 1) Infinite Loops while parsing crafted WMF, EMF, MSG and macros (POI bugs 61338 and… Affected: before 3.17 |
| CVE-2022-26336 | 5.5 | Mar 4 | A shortcoming in the HMEF package of poi-scratchpad (Apache POI) allows an attacker to cause an Out of Memory exception Affected: before 5.2.1 |
| CVE-2019-12415 | 5.5 | Oct 23 | In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files… Affected: through 4.1.0 |
| CVE-2017-5644 | 5.5 | Mar 24 | Apache POI in versions prior to release 3.15 allows remote attackers to cause a denial of service (CPU consumption) via a specially crafted OOXML file, aka an XML Entity Expansion… Affected: through 3.14 |
| CVE-2016-5000 | 5.5 | Aug 5 | The XLSX2CSV example in Apache POI before 3.14 allows remote attackers to read arbitrary files via a crafted OpenXML document containing an external entity declaration in… Affected: through 3.13 |
| CVE-2025-31672 | 5.3 | Apr 9 | Improper Input Validation vulnerability in Apache POI Affected: before 5.4.0 |
| CVE-2014-9527 | – | Jan 6 | HSLFSlideShow in Apache POI before 3.11 allows remote attackers to cause a denial of service (infinite loop and deadlock) via a crafted PPT file Affected: through 3.11 |
| CVE-2014-3574 | – | Sep 4 | Apache POI before 3.10.1 and 3.11.x before 3.11-beta2 allows remote attackers to cause a denial of service (CPU consumption and crash) via a crafted OOXML file, aka an XML Entity… Affected: through 3.10; 0.1; 0.2; 0.3; 0.4; 0.5; +34 more |
| CVE-2014-3529 | – | Sep 4 | The OPC SAX setup in Apache POI before 3.10.1 allows remote attackers to read arbitrary files via an OpenXML file containing an XML external entity declaration in conjunction with… Affected: through 3.10; 0.1; 0.2; 0.3; 0.4; 0.5; +34 more |
| CVE-2012-0213 | – | Aug 7 | The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError… Affected: through 3.8; 0.1; 0.2; 0.3; 0.4; 0.5; +34 more |
Showing 10