CVE-2014-3574

Published: Sep 4, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Apache POI before 3.10.1 and 3.11.x before 3.11-beta2 allows remote attackers to cause a denial of service (CPU consumption and crash) via a crafted OOXML file, aka an XML Entity Expansion (XEE) attack.

Affected (65)

Products: Apache: Poi

Apache

1 product

Poi

Configuration A

65 vulnerable

Vulnerable Software	Affected Versions
Apache Poi	Up to 3.10
Apache Poi	Version 0.10.0
Apache Poi	Version 0.11.0
Apache Poi	Version 0.12.0
Apache Poi	Version 0.13.0
Apache Poi	Version 0.14.0
Apache Poi	Version 0.1
Apache Poi	Version 0.2
Apache Poi	Version 0.3
Apache Poi	Version 0.4
Apache Poi	Version 0.5
Apache Poi	Version 0.6
Apache Poi	Version 0.7
Apache Poi	Version 1.0.0
Apache Poi	Version 1.0.1
Apache Poi	Version 1.0.2
Apache Poi	Version 1.1.0
Apache Poi	Version 1.10 dev
Apache Poi	Version 1.2.0
Apache Poi	Version 1.5.1
Apache Poi	Version 1.5
Apache Poi	Version 1.7 dev
Apache Poi	Version 1.8 dev
Apache Poi	Version 2.0
Apache Poi	Version 2.0 pre1
Apache Poi	Version 2.0 pre2
Apache Poi	Version 2.0 pre3
Apache Poi	Version 2.0 rc1
Apache Poi	Version 2.0 rc2
Apache Poi	Version 2.5.1
Apache Poi	Version 2.5
Apache Poi	Version 3.0.1
Apache Poi	Version 3.0.2
Apache Poi	Version 3.0.2 beta1
Apache Poi	Version 3.0.2 beta2
Apache Poi	Version 3.0
Apache Poi	Version 3.0 alpha1
Apache Poi	Version 3.0 alpha2
Apache Poi	Version 3.0 alpha3
Apache Poi	Version 3.10 beta1
Apache Poi	Version 3.10 beta2
Apache Poi	Version 3.11 beta1
Apache Poi	Version 3.1
Apache Poi	Version 3.1 beta1
Apache Poi	Version 3.1 beta2
Apache Poi	Version 3.2
Apache Poi	Version 3.5
Apache Poi	Version 3.5 beta1
Apache Poi	Version 3.5 beta2
Apache Poi	Version 3.5 beta3
Apache Poi	Version 3.5 beta4
Apache Poi	Version 3.5 beta5
Apache Poi	Version 3.5 beta6
Apache Poi	Version 3.6
Apache Poi	Version 3.7
Apache Poi	Version 3.7 beta1
Apache Poi	Version 3.7 beta2
Apache Poi	Version 3.7 beta3
Apache Poi	Version 3.8
Apache Poi	Version 3.8 beta1
Apache Poi	Version 3.8 beta2
Apache Poi	Version 3.8 beta3
Apache Poi	Version 3.8 beta4
Apache Poi	Version 3.8 beta5
Apache Poi	Version 3.9