CVE-2017-5644

Apache POI in versions prior to release 3.15 allows remote attackers to cause a denial of service (CPU consumption) via a specially crafted OOXML file, aka an…

published March 24, 2017

CVSS
—
EPSS
5%
Percentile
91.6
In the wild
Unconfirmed
What it is

Apache POI in versions prior to release 3.15 allows remote attackers to cause a denial of service (CPU consumption) via a specially crafted OOXML file, aka an XML Entity Expansion (XEE) attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04595 · 91.6th percentile
Published
2017-03-24T14:00Z
EPSS history
Timeline
  • 24 MAR 14:00Z
    Apache POI in versions prior to release 3.15 allows remote attackers to cause a denial of service (CPU consumption) via a specially crafted OOXML file, aka an…
    cvelistv5