Vulnetix
Try Vulnetix Request Demo
CVE-2019-12415 PUBLISHED

In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files from the local filesystem or from internal network resources via XML External Entity (XXE) Processing.

EPSS 0.02% · 6.0th percentile

Risk Scores

EPSS Score
0.02%
6.0th percentile

Affected Products

VendorProductVersions
Ubuntu:22.04:LTSlibapache-poi-java4.0.1-1, 4.0.1-3, 4.0.1-2
Ubuntu:24.04:LTSlibapache-poi-java4.0.1-6, 4.0.1-4, 0
Ubuntu:18.04:LTSlibapache-poi-java4.0.1-1~18.03, 3.10.1-3, 0
Ubuntu:16.04:LTSlibapache-poi-java0, 3.10.1-2
Ubuntu:25.10libapache-poi-java0, 4.0.1-6
Ubuntu:20.04:LTSlibapache-poi-java4.0.1-1, 0

Timeline

References

Open in Interactive Console →