Skip to content
Sign in
Not rated

CVE-2017-5644 Apache POI in versions prior to release 3.15 allows remote attackers to cause a denial of service (CPU consumption)…

Description

Apache POI in versions prior to release 3.15 allows remote attackers to cause a denial of service (CPU consumption) via a specially crafted OOXML file, aka an XML Entity Expansion (XEE) attack.

Affected products and versions

Product Affected versions Fixed in
Apache POI Versions not published

Other CVEs of Apache POI

The 3 CVEs of Apache POI →
CVE-2025-31672 Improper Input Validation vulnerability in Apache POI Not rated CVE-2017-12626 Apache POI in versions prior to release 3.17 are vulnerable to Denial of Service Attacks: 1) Infinite Loops while… 7.5 High
Track this CVE