CVE-2014-3529

The OPC SAX setup in Apache POI before 3.10.1 allows remote attackers to read arbitrary files via an OpenXML file containing an XML external entity declaration…

published September 4, 2014

CVSS
—
EPSS
13%
Percentile
96.3
In the wild
Unconfirmed
What it is

The OPC SAX setup in Apache POI before 3.10.1 allows remote attackers to read arbitrary files via an OpenXML file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.12757 · 96.3th percentile
Published
2014-09-04T17:00Z
EPSS history
Timeline
  • 04 SEP 17:00Z
    The OPC SAX setup in Apache POI before 3.10.1 allows remote attackers to read arbitrary files via an OpenXML file containing an XML external entity declaration…
    cvelistv5