Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2014-3529

🗓️ 04 Sep 2014 17:00:00Reported by redhatType 
cve
 cve🔗 web.nvd.nist.gov👁 97 Views

The OPC SAX setup in Apache POI before 3.10.1 allows remote attackers to read arbitrary files via an OpenXML file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue

Related
Detection
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Release of QRadar 7.2.8 Patch 4 (7.2.8.20170224202650) Updated w/Security Bulletins
10 May 201914:29
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities found in poi-ooxml-3.9.jar which is shipped with IBM® Intelligent Operations Center(CVE-2017-5644, CVE-2019-12415, CVE-2014-3574, CVE-2014-3529)
5 Sep 202312:52
–ibm
IBM Security Bulletins		Security Bulletin: Atlas eDiscovery Process Management is affected by a vulnerable poi-ooxml-3.9.jar
8 May 202308:37
–ibm
IBM Security Bulletins		Security Bulletins for Emptoris Program Management
8 Dec 201816:15
–ibm
IBM Security Bulletins		Security Bulletin: OpenSource Apache Poi Vulnerabilities in IBM eDiscovery Manager
17 Jun 201812:17
–ibm
IBM Security Bulletins		Security Bulletins for Emptoris Contract Management
8 Dec 201816:15
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in Apache POI affect Asset and Service Management
22 Sep 202203:02
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in IBM Cognos affect IBM Control Center (CVE-2012-0213, CVE-2014-3574, CVE-2014-3529, CVE-2014-9527)
17 Dec 201922:47
–ibm
IBM Security Bulletins		Security Bulletins for Emptoris Services Procurement
8 Dec 201816:15
–ibm
IBM Security Bulletins		Security Bulletin: IBM Forms Experience Builder could be susceptible to Apache POI Vulnerabilities
16 Jun 201820:07
–ibm
Rows per page
NVD
Node
apachepoiRange≤3.10
OR
apachepoiMatch0.1
OR
apachepoiMatch0.2
OR
apachepoiMatch0.3
OR
apachepoiMatch0.4
OR
apachepoiMatch0.5
OR
apachepoiMatch0.6
OR
apachepoiMatch0.7
OR
apachepoiMatch0.10.0
OR
apachepoiMatch0.11.0
OR
apachepoiMatch0.12.0
OR
apachepoiMatch0.13.0
OR
apachepoiMatch0.14.0
OR
apachepoiMatch1.0.0
OR
apachepoiMatch1.0.1
OR
apachepoiMatch1.0.2
OR
apachepoiMatch1.1.0
OR
apachepoiMatch1.2.0
OR
apachepoiMatch1.5
OR
apachepoiMatch1.5.1
OR
apachepoiMatch1.7dev
OR
apachepoiMatch1.8dev
OR
apachepoiMatch1.10dev
OR
apachepoiMatch2.0
OR
apachepoiMatch2.0pre1
OR
apachepoiMatch2.0pre2
OR
apachepoiMatch2.0pre3
OR
apachepoiMatch2.0rc1
OR
apachepoiMatch2.0rc2
OR
apachepoiMatch2.5
OR
apachepoiMatch2.5.1
OR
apachepoiMatch3.0
OR
apachepoiMatch3.0alpha1
OR
apachepoiMatch3.0alpha2
OR
apachepoiMatch3.0alpha3
OR
apachepoiMatch3.0.1
OR
apachepoiMatch3.0.2
OR
apachepoiMatch3.0.2beta1
OR
apachepoiMatch3.0.2beta2
OR
apachepoiMatch3.1
OR
apachepoiMatch3.1beta1
OR
apachepoiMatch3.1beta2
OR
apachepoiMatch3.2
OR
apachepoiMatch3.5
OR
apachepoiMatch3.5beta1
OR
apachepoiMatch3.5beta2
OR
apachepoiMatch3.5beta3
OR
apachepoiMatch3.5beta4
OR
apachepoiMatch3.5beta5
OR
apachepoiMatch3.5beta6
OR
apachepoiMatch3.6
OR
apachepoiMatch3.7
OR
apachepoiMatch3.7beta1
OR
apachepoiMatch3.7beta2
OR
apachepoiMatch3.7beta3
OR
apachepoiMatch3.8
OR
apachepoiMatch3.8beta1
OR
apachepoiMatch3.8beta2
OR
apachepoiMatch3.8beta3
OR
apachepoiMatch3.8beta4
OR
apachepoiMatch3.8beta5
OR
apachepoiMatch3.9
OR
apachepoiMatch3.10beta1
OR
apachepoiMatch3.10beta2

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
06 May 2026 22:30Current
7.1High risk
Vulners AI Score7.1
CVSS 24.3
EPSS0.05228
cve-2014-3529opc saxapache poixxenvdsecurity vulnerability
97