CVE-2017-5644 PUBLISHED

Apache POI in versions prior to release 3.15 allows remote attackers to cause a denial of service (CPU consumption) via a specially crafted OOXML file, aka an XML Entity Expansion (XEE) attack.

EPSS 0.66% · 70.9th percentile

Risk Scores

EPSS Score
0.66%
70.9th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlibapache-poi-java0, 3.10.1-2

Timeline

References

Open in Interactive Console →