Apache Poi vulnerabilities

• apache poi, netapp active iq unified manager +1 more Apache POI: parsing OOXML based files (xlsx, docx, etc.), poi-ooxml could read unexpected data if underlying zip has duplicate zip entry names CVE-2025-31672 Fix available 5.3 MediumApril 9, 2025
• apache poi, apache software foundation poi-scratchpad, netapp active iq unified manager +2 more A carefully crafted TNEF file can cause an out of memory exception CVE-2022-26336 Fix available 5.5 MediumMarch 4, 2022
• apache poi, oracle application testing suite, banking enterprise originations +24 more +26 more Improper Restriction of XML External Entity Reference in Apache POI CVE-2019-12415 Fix available 5.5 MediumOctober 23, 2019
• apache poi Denial of Service in Apache POI CVE-2017-12626 Fix available EPSS 10.1% 7.5 HighJanuary 29, 2018
• apache poi Improper Restriction of Recursive Entity References in DTDs in Apache POI CVE-2017-5644 Fix available 5.5 MediumMarch 24, 2017
• apache poi Apache POI's XLSX2CSV Example XML External Entity (XXE) Vulnerability CVE-2016-5000 Fix available 5.5 MediumAugust 5, 2016
• apache poi, fedoraproject fedora +1 more Loop with Unreachable Exit Condition in Apache POI CVE-2014-9527 Fix available 5.0 MediumJanuary 6, 2015
• apache poi Improper Input Validation in Apache POI CVE-2014-3574 Fix available 4.3 MediumSeptember 4, 2014
• apache poi Improper Restriction of XML External Entity Reference in Apache POI CVE-2014-3529 Fix available EPSS 12.8% 4.3 MediumSeptember 4, 2014
• apache poi Denial of Service in Apache POI CVE-2012-0213 Fix available 5.0 MediumMay 9, 2012