Product by Apache Software Foundation
Apache POI
10 known vulnerabilities in Apache POI (Apache Software Foundation), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2017-12626 | Apache POI: Infinite Loop | 7.5 | |
| Medium | CVE-2017-5644 | Apache POI: Denial of Service | 5.5 | |
| Medium | CVE-2016-5000 | Apache POI: XML External Entity (XXE) | 5.5 | |
| Medium | CVE-2025-31672 | Apache POI: Improper Input Validation | 5.3 | |
| Not rated | CVE-2014-3529 | Apache POI: XML External Entity (XXE) | — | |
| Medium | CVE-2022-26336 | A carefully crafted TNEF file can cause an out of memory exception | 5.5 | |
| Not rated | CVE-2012-0213 | Apache POI: Denial of Service | — | |
| Not rated | CVE-2014-3574 | Apache POI: Denial of Service | — | |
| Not rated | CVE-2014-9527 | Apache POI: Deadlock | — | |
| Medium | CVE-2019-12415 | Apache POI: XML External Entity (XXE) | 5.5 |