CVE-2025-31672

🗓️ 09 Apr 2025 11:59:33Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 319 Views

Apache POI vulnerability allows reading incorrect data from OOXML files due to duplicate zip entries.

Reporter	Title	Published	Views	Family All 60
IBM Security Bulletins	Security Bulletin: There is a vulnerability in poi-ooxml-5.3.0.jarused by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2025-31672)	26 Jun 202505:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple vulnerabilities	31 Jul 202514:21	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache POI library affect Tivoli Netcool/OMNIbus WebGUI (CVE-2025-31672)	17 Jun 202509:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for March 2026 - Multiple CVEs addressed	26 Mar 202606:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache affects IBM watsonx Orchestrate with watsonx Assistant Cartridge	11 Aug 202517:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by an improper input validation vulnerability in Apache POI (CVE-2025-31672)	29 Sep 202520:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (August 2025 - Part 1 of 2)	2 Sep 202518:13	–	ibm
IBM Security Bulletins	Security Bulletin: Common vulnerabilities addressed in Cloudera Observability 3.6.2	9 Mar 202617:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operations Analytics - Log Analysis is affected by potential data integrity and denial of service due to Apache POI	6 Apr 202614:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Lifecycle Management - Jazz Foundation is impacted by vulnerabilities in Apache POI	29 Jan 202605:08	–	ibm

NVD

Vulners

Node

apache poiRange<5.4.0

Node

netapp active_iq_unified_managerMatch-linux

netapp active_iq_unified_managerMatch-vmware_vsphere

netapp active_iq_unified_managerMatch-windows

[
  {
    "collectionURL": "https://repo.maven.apache.org/maven2",
    "defaultStatus": "unaffected",
    "packageName": "org.apache.poi:poi-ooxml",
    "product": "Apache POI",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "5.4.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
bz	www.bz.apache.org/bugzilla/show_bug.cgi
lists	www.lists.apache.org/thread/k14w8vcjqy4h34hh5kzldko78kpylkq5
security	www.security.netapp.com/advisory/ntap-20250523-0004/
openwall	www.openwall.com/lists/oss-security/2025/04/08/2

15 Jul 2025 19:08Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.15.3

EPSS0.00521

SSVC

CWE-20