CVE-2017-5644

🗓️ 24 Mar 2017 14:00:00Reported by apacheType

Apache POI prior to 3.15 allows denial of service via crafted OOXML file

Reporter	Title	Published	Views	Family All 37
IBM Security Bulletins	Security Bulletin: IBM DataQuant is affected by an Open Source Apache Poi vulnerability.	11 Feb 202116:57	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities found in poi-ooxml-3.9.jar which is shipped with IBM® Intelligent Operations Center(CVE-2017-5644, CVE-2019-12415, CVE-2014-3574, CVE-2014-3529)	5 Sep 202312:52	–	ibm
IBM Security Bulletins	Security Bulletin: Atlas eDiscovery Process Management is affected by a vulnerable poi-ooxml-3.9.jar	8 May 202308:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities Impact IBM Predictive Insights	8 Sep 202020:36	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache POI affects IBM Emptoris Services Procurement (CVE-2017-5644)	16 Jun 201820:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Jazz Team Server affect IBM Rational products based on IBM Jazz technology	28 Apr 202118:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM OpenPages GRC Platform has addressed multiple Apache POI vulnerabilities (CVE-2017-5644, CVE-2016-5000, CVE-2014-3574)	15 Jun 201822:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Common Reporting (TCR) 2017Q3 Security Updater: TCR, a part of IBM Jazz for Service Management (JazzSM) is affected by multiple vulnerabilities	17 Jun 201815:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect embedded rules in IBM Business Automation Workflow	11 Jan 202413:32	–	ibm
IBM Security Bulletins	Security Bulletin: Apache POI as used in IBM QRadar SIEM is vulnerable to a denial of service. (CVE-2017-5644)	16 Jun 201822:04	–	ibm

NVD

Vulners

Node

apache poiRange≤3.14

[
  {
    "product": "Apache POI",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "before 3.15"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/96983
oracle	www.oracle.com/security-alerts/cpuoct2020.html
poi	www.poi.apache.org/

13 May 2026 00:24Current

5.3Medium risk

Vulners AI Score5.3

CVSS 35.5

CVSS 27.1

EPSS0.0066

CWE-776