AP
Product
Apache POI
by Apache Software Foundation · last CVE Apr 9, 2025
1
CVEs
0
On KEV
5.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch

Add Apache POI to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-31672
5.3
1%
Apr 9
Apache POI: parsing OOXML based files (xlsx, docx, etc.), poi-ooxml could read unexpected data if underlying zip has duplicate zip entry names
Affected: before 5.4.0
Showing 1