CVE-2017-5644 Security Details

CVE ID

CVE-2017-5644

CWE

CWE-776

CVE Description

Apache POI in versions prior to release 3.15 allows remote attackers to cause a denial of service (CPU consumption) via a specially crafted OOXML file, aka an XML Entity Expansion (XEE) attack.

Published

Mar 30, 2017

CVSS Score & Severity

5.5Medium

CVSS Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS Score

0.660%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Affected Ecosystems

affected

Source

National Vulnerability Database

References

ApachePROJECT

Red Hat · BugzillaTHIRD_PARTY