Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.poi:poi

7 known vulnerabilities (1 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
7 · 1 high
Registry
Maven Central

Advisories 7

  • In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted…

    Affected: fixed in 4.1.1.

  • Apache POI in versions prior to release 3.17 are vulnerable to Denial of Service Attacks: 1) Infinite Loops while parsing crafted WMF…

    Affected: fixed in 3.17.

  • Apache POI in versions prior to release 3.15 allows remote attackers to cause a denial of service (CPU consumption) via a specially…

    Affected: fixed in 3.15.

  • HSLFSlideShow in Apache POI before 3.11 allows remote attackers to cause a denial of service (infinite loop and deadlock) via a crafted…

    Affected: fixed in 3.11.

  • Apache POI before 3.10.1 and 3.11.x before 3.11-beta2 allows remote attackers to cause a denial of service (CPU consumption and crash) via…

    Affected: fixed in 3.10.1; from 3.11-beta1, fixed in 3.11-beta2.

  • The OPC SAX setup in Apache POI before 3.10.1 allows remote attackers to read arbitrary files via an OpenXML file containing an XML…

    Affected: fixed in 3.10.1.

  • The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to…

    Affected: fixed in 3.10-beta1.