CLSA-2026-1777941834 TuxCare security update for org.apache.poi (5 CVEs)

🗓️ 04 Aug 2026 14:52:30Reported by GoogleType

osv🔗 osv.dev👁 5 Views

TuxCare fixes five CVEs in six org.apache.poi packages; version 3.10-FINAL-tuxcare.1.

Reporter	Title	Published	Views	Family All 186
IBM Security Bulletins	Release of QRadar 7.2.8 Patch 4 (7.2.8.20170224202650) Updated w/Security Bulletins	10 May 201914:29	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities found in poi-ooxml-3.9.jar which is shipped with IBM® Intelligent Operations Center(CVE-2017-5644, CVE-2019-12415, CVE-2014-3574, CVE-2014-3529)	5 Sep 202312:52	–	ibm
IBM Security Bulletins	Security Bulletin: Atlas eDiscovery Process Management is affected by a vulnerable poi-ooxml-3.9.jar	8 May 202308:37	–	ibm
IBM Security Bulletins	Security Bulletins for Emptoris Program Management	8 Dec 201816:15	–	ibm
IBM Security Bulletins	Security Bulletin: Apache POI is vulnerable to a denial of service, caused by an out of memory exception flaw in the HMEF package(CVE-2022-26336)	7 Feb 202313:51	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in poi-ooxml-5.3.0.jarused by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2025-31672)	26 Jun 202505:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Decision Optimization for Cloud Pak for Data is vulnerable to a denial of service (CVE-2022-26336)	20 Jun 202408:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple vulnerabilities	31 Jul 202514:21	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities found in poi-3.9.jar, poi-scratchpad-3.9.jar which is shipped with IBM® Intelligent Operations Center(CVE-2017-12626, CVE-2014-9527)	5 Sep 202312:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM OpenPages GRC Platform has addressed multiple Apache POI vulnerabilities (CVE-2017-5644, CVE-2016-5000, CVE-2014-3574)	15 Jun 201822:48	–	ibm

07 Aug 2026 10:01Current

6.2Medium risk

Vulners AI Score6.2

CVSS 25

CVSS 3.15.3 - 5.5

EPSS0.13258

SSVC

tuxcare update org apache poi five vulnerabilities six packages final tuxcare one