CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

UbuntuCve•added 2014/09/04 5:55 p.m.•31 views

CVE-2014-3529

The OPC SAX setup in Apache POI before 3.10.1 allows remote attackers to read arbitrary files via an OpenXML file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

4.3CVSS6.8AI score0.13258EPSS

Exploits0References6

Cvelist•added 2014/09/04 5:0 p.m.•20 views

CVE-2014-3529

5.4AI score0.13258EPSS

Exploits0References14

CVE•added 2014/09/04 5:0 p.m.•105 views

CVE-2014-3529

The CVE-2014-3529 issue is an XXE in Apache POI’s OOXML processing (OPC SAX setup) prior to 3.10.1, enabling a remote attacker to read arbitrary files via an OpenXML file containing an external entity declaration. IBM and vulnerability bulletins note that upgrading poi-ooxml to 4.0.x (and general...

4.3CVSS7.1AI score0.13258EPSS

Exploits0References14Affected Software1