Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2016-5000HistoryAug 05, 2016 - 2:59 p.m.
CVE-2016-5000
2016-08-0514:59:00
Debian Security Bug Tracker
security-tracker.debian.org
8
0.002 Low
EPSS
Percentile
52.2%
The XLSX2CSV example in Apache POI before 3.14 allows remote attackers to read arbitrary files via a crafted OpenXML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libapache-poi-java | <= 4.0.1-4 | libapache-poi-java_4.0.1-4_all.deb |
| Debian | 11 | all | libapache-poi-java | <= 4.0.1-1 | libapache-poi-java_4.0.1-1_all.deb |
| Debian | 10 | all | libapache-poi-java | <= 4.0.1-1 | libapache-poi-java_4.0.1-1_all.deb |
| Debian | 999 | all | libapache-poi-java | <= 4.0.1-6 | libapache-poi-java_4.0.1-6_all.deb |
| Debian | 13 | all | libapache-poi-java | <= 4.0.1-6 | libapache-poi-java_4.0.1-6_all.deb |
Related
prion
prion
Xxe
2016-08-05 14:59:00
cve
cve
CVE-2016-5000
2016-08-05 14:59:00
redhatcve
redhatcve
CVE-2016-5000
2016-07-25 09:18:24
ibm
ibm
cvelist
cvelist
CVE-2016-5000
2016-08-05 14:00:00
osv
osv
Apache POI's XLSX2CSV Example XML External Entity (XXE) Vulnerability
2022-05-13 01:14:25
github
github
Apache POI's XLSX2CSV Example XML External Entity (XXE) Vulnerability
2022-05-13 01:14:25
ubuntucve
ubuntucve
CVE-2016-5000
2016-08-05 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2017
2017-01-17 00:00:00
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00