Security Bulletin:IBM Storage Protect Server is affected by a vulnerability in the Apache POI library that could lead to denial-of-service when processing specially crafted archive files (CVE-2019-12415).

Summary IBM Storage Protect Server uses the Apache POI library in certain components; this library is vulnerable to processing specially crafted archive files that may cause excessive memory allocation, potentially leading to a denial-of-service condition. Vulnerability Details CVEID:CVE-2019-124...

Security Bulletin:IBM Storage Protect Server is affected by a vulnerability in the Apache POI library that could lead to denial-of-service when processing specially crafted archive files (CVE-2019-12415).

Summary IBM Storage Protect Server uses the Apache POI library in certain components; this library is vulnerable to processing specially crafted archive files that may cause excessive memory allocation, potentially leading to a denial-of-service condition. Vulnerability Details CVEID:CVE-2019-124...

CVE-2019-12415

creationtimestamp| type| source ---|---|--- 2024-01-27 08:11:19+00:00| seen| https://t.me/ctinow/174673...

Security Bulletin: Multiple vulnerabilities affect embedded rules in IBM Business Automation Workflow

Summary Embedded rules in IBM Business Automation Workflow are affected by multiple vulnerabilities. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2018-1000632 DESCRIPTION: dom4j could allow a remote attacker to execute arbitrary code o...

Security Bulletin: Vulnerabilities found in poi-ooxml-3.9.jar which is shipped with IBM® Intelligent Operations Center(CVE-2017-5644, CVE-2019-12415, CVE-2014-3574, CVE-2014-3529)

Summary Multiple vulnerabilities have been identified in poi-ooxml-3.9.jar which is shipped with IBM® Intelligent Operations Center. Information about these vulnerabilities affecting IBM® Intelligent Operations Center have been published and addressed the applicable CVEs. Vulnerability Details...

Security Bulletin: Atlas eDiscovery Process Management is affected by a vulnerable poi-ooxml-3.9.jar

Summary Atlas eDiscovery Process Management is affected by a vulnerable poi-ooxml-3.9.jar. Hence poi-ooxml-3.9.jar upgraded to poi-ooxml-4.0.jar to fix vulnerabilities. Vulnerability Details CVEID:CVE-2017-5644 DESCRIPTION: Apache POI is vulnerable to a denial of service, cause by an XML External...

Security Bulletin: IBM Sterling B2B Integrator is vulnerable to XML Enternal Entity error due to Apache POI (CVE-2019-12415)

Summary IBM Sterling B2B Integrator has addressed the XXE security vulnerability in Apache POI Vulnerability Details CVEID:CVE-2019-12415 DESCRIPTION: Apache POI could allow a remote attacker to obtain sensitive information, caused by an XML external entity XXE error when processing XML data by...

Security Bulletin: Apache POI up to 4.1.0 allows an attacker while converting user-provided document to XML

Summary In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker​​. Vulnerability Details CVEID:CVE-2019-12415 DESCRIPTION: Apache POI could allow a remote attacker to obtain sensitive...

Security Bulletin: A security vulnerability has been identified in Apache POI shipped with IBM Tivoli Netcool Impact (CVE-2019-12415)

Summary Apache POI is shipped with IBM Tivoli Netcool Impact. Information about a security vulnerability affecting Apache POI has been published in a security bulletin. Vulnerability Details CVEID: CVE-2019-12415 DESCRIPTION: Apache POI could allow a remote attacker to obtain sensitive informatio...

org.apache.poi:poi-contrib (3.5-beta5), org.apache.poi:poi-ooxml (3.5-beta5) +5 more potentially affected by CVE-2019-12415 via org.apache.poi:poi (3.5-beta5)

org.apache.poi:poi MAVEN version 3.5-beta5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.poi:poi and may be impacted: - org.apache.poi:poi-contrib 3.5-beta5 - org.apache.poi:poi-ooxml 3.5-beta5 - org.apache.poi:poi-scratchpad 3.5-beta5 -...

br.com.starcode.trex:t-rex (0.7.1), com.base4j:base4j-util (>=1.0.4, <=1.1.6) +204 more potentially affected by CVE-2019-12415 via org.apache.poi:poi (3.10-final)

org.apache.poi:poi MAVEN version 3.10-final is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.poi:poi and may be impacted: - br.com.starcode.trex:t-rex 0.7.1 - com.base4j:base4j-util =1.0.4, =5.0.1.1, =5.0.2, =5.0.2, =5.0.2, =5.0.2, =5.0.2,...

cc.protea.foundation:foundation (>=0.1, <=0.2), cc.protea.platform:platform (>=0.1, <=0.2) +110 more potentially affected by CVE-2019-12415 via org.apache.poi:poi (3.10.1)

org.apache.poi:poi MAVEN version 3.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.poi:poi and may be impacted: - cc.protea.foundation:foundation =0.1, =0.1, =1.3, =1.31, =1.2, =1.4, =1.2, =0.1, =1.0.14, =1.0.14, =1.0.14, =1.0.33,...

com.qaprosoft:carina-dataprovider (>=5.2.1.30, <=6.4.36), org.apache.poi:poi-examples (3.11-beta3) +3 more potentially affected by CVE-2019-12415 via org.apache.poi:poi (3.11-beta3)

org.apache.poi:poi MAVEN version 3.11-beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.poi:poi and may be impacted: - com.qaprosoft:carina-dataprovider =5.2.1.30, =6.4.36 - org.apache.poi:poi-examples 3.11-beta3 -...

ae.teletronics.nlp:entityextraction (>=1.3, <=1.4), at.mukprojects:exclycore (1.0.0) +404 more potentially affected by CVE-2019-12415 via org.apache.poi:poi (3.11)

org.apache.poi:poi MAVEN version 3.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.poi:poi and may be impacted: - ae.teletronics.nlp:entityextraction =1.3, =1.0.0, =0.0.2.alpha, =0.0.2.alpha, =0.0.2.alpha, =0.0.2.alpha, =0.0.1.alpha,...

org.apache.nifi:nifi-media-nar (>=0.7.0, <=1.4.0), org.apache.nifi:nifi-media-processors (>=0.7.0, <=1.4.0) +15 more potentially affected by CVE-2019-12415 via org.apache.poi:poi (3.12-beta1)

org.apache.poi:poi MAVEN version 3.12-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.poi:poi and may be impacted: - org.apache.nifi:nifi-media-nar =0.7.0, =0.7.0, =2.6.0, =2.7.0 - uk.nhs.ciao:ciao-docs-parser 0.1 and more Source cves:...

br.com.jarch:jarch-annotation (>=2.23.5, <=20.2.0), br.com.jarch:jarch-apt (>=2.23.5, <=25.11.0) +270 more potentially affected by CVE-2019-12415 via org.apache.poi:poi (3.12)

org.apache.poi:poi MAVEN version 3.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.poi:poi and may be impacted: - br.com.jarch:jarch-annotation =2.23.5, =2.23.5, =19.1.0, =2.23.5, =2.23.5, =20.3.0, =2.23.5, =2.23.5, =24.2.0, =2.23.5,...

at.iem:sysson_2.10 (1.12.0), at.iem:sysson_2.11 (>=1.10.2, <=1.12.0) +488 more potentially affected by CVE-2019-12415 via org.apache.poi:poi (3.13)

org.apache.poi:poi MAVEN version 3.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.poi:poi and may be impacted: - at.iem:sysson2.10 1.12.0 - at.iem:sysson2.11 =1.10.2, =0.3.1, =0.3.1, =3.6.1, =3.6.1, =3.6.1, =3.6.1, =3.6.1, =3.6.1, =3.6.1...

com.hack23.cia:service.component.agent.impl (>=2016.2.7, <=2016.3.7), com.hack23.cia:service.data.impl (>=2016.1.10, <=2016.3.7) +6 more potentially affected by CVE-2019-12415 via org.apache.poi:poi (3.14-beta1)

org.apache.poi:poi MAVEN version 3.14-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.poi:poi and may be impacted: - com.hack23.cia:service.component.agent.impl =2016.2.7, =2016.1.10, =2016.2.7, =2016.1.10, =2016.3.7 -...

br.com.digix:editordedocumento (>=1.1.8, <=2.4.0), br.com.tecsinapse:tecsinapse-data-io (>=2.0.0, <=3.0.3-b) +267 more potentially affected by CVE-2019-12415 via org.apache.poi:poi (3.14)

org.apache.poi:poi MAVEN version 3.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.poi:poi and may be impacted: - br.com.digix:editordedocumento =1.1.8, =2.0.0, =1.0.0, =0.0.3, =0.3.2, =v1.0.13oldrzm, =v1.0.13oldrzm, =0.0.1-beta3, =0.1.9,...

au.com.turingg:turingg-files (0.0.1), au.com.turingg:turingg-mimak (1.0.0) +108 more potentially affected by CVE-2019-12415 via org.apache.poi:poi (3.15-beta1)

org.apache.poi:poi MAVEN version 3.15-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.poi:poi and may be impacted: - au.com.turingg:turingg-files 0.0.1 - au.com.turingg:turingg-mimak 1.0.0 -...