Apache Poi (Apache Software Foundation) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-04-09. Vendor: Apache Software Foundation.

CVEs of Apache Poi

• CVE-2025-31672 - CVSS 5.3 (medium), 2025-04-09: Improper Input Validation vulnerability in Apache POI. The issue affects the parsing of OOXML format files like xlsx, docx and pptx. These file formats are…
• CVE-2017-12626 - CVSS 7.5 (high), 2018-01-29: Apache POI in versions prior to release 3.17 are vulnerable to Denial of Service Attacks: 1) Infinite Loops while parsing crafted WMF, EMF, MSG and macros…
• CVE-2017-5644 - CVSS 5.5 (medium), 2017-03-24: Apache POI in versions prior to release 3.15 allows remote attackers to cause a denial of service (CPU consumption) via a specially crafted OOXML file, aka an…