What’s Vulnerable › Products

Apache Software Foundation Apache POI vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Apache Software Foundation Apache POI version is affected

Latest Apache Software Foundation Apache POI vulnerabilities

• CVE-2025-31672 — Apache POI: parsing OOXML based files (xlsx, docx, etc.), poi-ooxml could read unexpected data if underlying zip has duplicate zip entry names (CVSS 5.3)
• CVE-2022-26336 — A carefully crafted TNEF file can cause an out of memory exception (CVSS 5.5)
• CVE-2019-12415 — (CVSS 5.5)
• CVE-2017-12626 — (CVSS 7.5)
• CVE-2017-5644 — (CVSS 5.5)
• CVE-2016-5000 — (CVSS 5.5)
• CVE-2014-9527 — (CVSS 5.0)
• CVE-2014-3574 — (CVSS 4.3)
• CVE-2014-3529 — (CVSS 4.3)
• CVE-2012-0213 — (CVSS 5.0)