Denial of Service in Apache POI

🗓️ 14 Jan 2021 19:18:22Reported by GitHub Advisory DatabaseType

github🔗 github.com👁 123 Views

Denial of Service vulnerability in Apache POI version prior to 3.1

Reporter	Title	Published	Views	Family All 65
Gitee	Exploit for Unrestricted Upload of File with Dangerous Type in Apache Tomcat	16 May 202116:14	–	gitee
Gitee	Exploit for Unrestricted Upload of File with Dangerous Type in Apache Tomcat	27 Apr 202114:33	–	gitee
Gitee	Exploit for Unrestricted Upload of File with Dangerous Type in Apache Tomcat	22 Oct 202115:45	–	gitee
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities Impact IBM Predictive Insights	8 Sep 202020:36	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities found in poi-3.9.jar, poi-scratchpad-3.9.jar which is shipped with IBM® Intelligent Operations Center(CVE-2017-12626, CVE-2014-9527)	5 Sep 202312:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	13 Aug 202122:15	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Poi as used by IBMQRadar SIEM is vulnerable to information disclosure (CVE-2019-12415, CVE-2017-12626)	21 Dec 202012:38	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities found in poi-3.9.jar which is shipped with IBM® Intelligent Operations Center [CVE-2017-12626 and X-Force ID: 220800]	7 Sep 202310:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect embedded rules in IBM Business Automation Workflow	11 Jan 202413:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Business Intelligence has addressed multiple vulnerabilties	19 Dec 201921:01	–	ibm

Vulners

Node

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-12626
access	www.access.redhat.com/errata/RHSA-2018:1322
lists	www.lists.apache.org/thread.html/453d9af5dbabaccd9afb58d27279a9dbfe8e35f4e5ea1645ddd6960b@%3Cdev.poi.apache.org%3E
lists	www.lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451@%3Csolr-user.lucene.apache.org%3E
oracle	www.oracle.com/security-alerts/cpuapr2020.html
oracle	www.oracle.com/security-alerts/cpujan2020.html
oracle	www.oracle.com/security-alerts/cpujul2020.html
oracle	www.oracle.com/security-alerts/cpuoct2020.html
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
securityfocus	www.securityfocus.com/bid/102879

09 Jun 2026 10:20Current

4.2Medium risk

Vulners AI Score4.2

CVSS 25

CVSS 37.5

CVSS 3.17.5

EPSS0.10248

SSVC