PO
Product
Poi
10
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 5Low 0
Watch
Add Poi to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-26336 | 5.5 | Mar 4 | A shortcoming in the HMEF package of poi-scratchpad (Apache POI) allows an attacker to cause an Out of Memory exception Affected: before 5.2.1 |
| CVE-2019-12415 | 5.5 | Oct 23 | In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files… Affected: through 4.1.0 |
| CVE-2017-5644 | 5.5 | Mar 24 | Apache POI in versions prior to release 3.15 allows remote attackers to cause a denial of service (CPU consumption) via a specially crafted OOXML file, aka an XML Entity Expansion… Affected: through 3.14 |
| CVE-2016-5000 | 5.5 | Aug 5 | The XLSX2CSV example in Apache POI before 3.14 allows remote attackers to read arbitrary files via a crafted OpenXML document containing an external entity declaration in… Affected: through 3.13 |
| CVE-2025-31672 | 5.3 | Apr 9 | Improper Input Validation vulnerability in Apache POI Affected: before 5.4.0 |
Showing 5