Improper Restriction of Recursive Entity References in DTDs in Apache POI

🗓️ 13 May 2022 01:14:24Reported by GitHub Advisory DatabaseType

github

github🔗 github.com👁 28 Views

Improper Restriction of Recursive Entity References in Apache PO

Reporter	Title	Published	Views	Family All 37
IBM Security Bulletins	Security Bulletin: IBM DataQuant is affected by an Open Source Apache Poi vulnerability.	11 Feb 202116:57	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities found in poi-ooxml-3.9.jar which is shipped with IBM® Intelligent Operations Center(CVE-2017-5644, CVE-2019-12415, CVE-2014-3574, CVE-2014-3529)	5 Sep 202312:52	–	ibm
IBM Security Bulletins	Security Bulletin: Atlas eDiscovery Process Management is affected by a vulnerable poi-ooxml-3.9.jar	8 May 202308:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities Impact IBM Predictive Insights	8 Sep 202020:36	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache POI affects IBM Emptoris Services Procurement (CVE-2017-5644)	16 Jun 201820:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Jazz Team Server affect IBM Rational products based on IBM Jazz technology	28 Apr 202118:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM OpenPages GRC Platform has addressed multiple Apache POI vulnerabilities (CVE-2017-5644, CVE-2016-5000, CVE-2014-3574)	15 Jun 201822:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Common Reporting (TCR) 2017Q3 Security Updater: TCR, a part of IBM Jazz for Service Management (JazzSM) is affected by multiple vulnerabilities	17 Jun 201815:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect embedded rules in IBM Business Automation Workflow	11 Jan 202413:32	–	ibm
IBM Security Bulletins	Security Bulletin: Apache POI as used in IBM QRadar SIEM is vulnerable to a denial of service. (CVE-2017-5644)	16 Jun 201822:04	–	ibm

Vulners

Node

org.apache.poi poiRange<3.15maven

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-5644
oracle	www.oracle.com/security-alerts/cpuoct2020.html
poi	www.poi.apache.org/
securityfocus	www.securityfocus.com/bid/96983
github	www.github.com/advisories/GHSA-78vv-qj73-h9m5

27 Jan 2023 05:02Current

5.6Medium risk

Vulners AI Score5.6

CVSS 35.5

CVSS 27.1

EPSS0.04616

apache poi remote attack denial of service cpu consumption ooxml file xml entity expansion