← Back

CVE-2014-3529

nvd nist
Published: Sep 4, 2014Modified: May 6, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:P/I:N/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

The OPC SAX setup in Apache POI before 3.10.1 allows remote attackers to read arbitrary files via an OpenXML file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Affected (64)

Products: Apache: Poi
Apache
1 product
Poi
Configuration A
64 vulnerable
Vulnerable SoftwareAffected Versions
Apache
Poi
Up to 3.10
Poi
Version 0.10.0
Poi
Version 0.11.0
Poi
Version 0.12.0
Poi
Version 0.13.0
Poi
Version 0.14.0
Poi
Version 0.1
Poi
Version 0.2
Poi
Version 0.3
Poi
Version 0.4
Poi
Version 0.5
Poi
Version 0.6
Poi
Version 0.7
Poi
Version 1.0.0
Poi
Version 1.0.1
Poi
Version 1.0.2
Poi
Version 1.1.0
Poi
Version 1.10 dev
Poi
Version 1.2.0
Poi
Version 1.5.1
Poi
Version 1.5
Poi
Version 1.7 dev
Poi
Version 1.8 dev
Poi
Version 2.0
Poi
Version 2.0 pre1
Poi
Version 2.0 pre2
Poi
Version 2.0 pre3
Poi
Version 2.0 rc1
Poi
Version 2.0 rc2
Poi
Version 2.5.1
Poi
Version 2.5
Poi
Version 3.0.1
Poi
Version 3.0.2
Poi
Version 3.0.2 beta1
Poi
Version 3.0.2 beta2
Poi
Version 3.0
Poi
Version 3.0 alpha1
Poi
Version 3.0 alpha2
Poi
Version 3.0 alpha3
Poi
Version 3.10 beta1
Poi
Version 3.10 beta2
Poi
Version 3.1
Poi
Version 3.1 beta1
Poi
Version 3.1 beta2
Poi
Version 3.2
Poi
Version 3.5
Poi
Version 3.5 beta1
Poi
Version 3.5 beta2
Poi
Version 3.5 beta3
Poi
Version 3.5 beta4
Poi
Version 3.5 beta5
Poi
Version 3.5 beta6
Poi
Version 3.6
Poi
Version 3.7
Poi
Version 3.7 beta1
Poi
Version 3.7 beta2
Poi
Version 3.7 beta3
Poi
Version 3.8
Poi
Version 3.8 beta1
Poi
Version 3.8 beta2
Poi
Version 3.8 beta3
Poi
Version 3.8 beta4
Poi
Version 3.8 beta5
Poi
Version 3.9

References (28)

Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.