CVE-2014-3574
N/A
Published: September 4, 2014 at 05:00 PM UTC
Updated: June 17, 2026 at 12:08 AM UTC
1 product affected across 1 vendorPoi
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 7%
Description
Apache POI before 3.10.1 and 3.11.x before 3.11-beta2 allows remote attackers to cause a denial of service (CPU consumption and crash) via a crafted OOXML file, aka an XML Entity Expansion (XEE) attack.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 3.100.10.10.00.11.00.12.00.13.00.14.00.20.30.40.50.60.71.0.01.0.11.0.21.1.01.10 dev1.2.01.51.5.11.7 dev1.8 dev2.02.0 pre12.0 pre22.0 pre32.0 rc12.0 rc22.52.5.13.03.0 alpha13.0 alpha23.0 alpha33.0.13.0.23.0.2 beta13.0.2 beta23.13.1 beta13.1 beta23.10 beta13.10 beta23.11 beta13.23.53.5 beta13.5 beta23.5 beta33.5 beta43.5 beta53.5 beta63.63.73.7 beta13.7 beta23.7 beta33.83.8 beta13.8 beta23.8 beta33.8 beta43.8 beta53.9
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (13)
Vendor Advisoryx_refsource_REDHAT
Source: [email protected]
http://rhn.redhat.com/errata/RHSA-2014-1370.htmlVendor Advisoryx_refsource_REDHAT
Source: [email protected]
http://rhn.redhat.com/errata/RHSA-2014-1398.htmlVendor Advisoryx_refsource_REDHAT
Source: [email protected]
http://rhn.redhat.com/errata/RHSA-2014-1399.htmlVendor Advisoryx_refsource_REDHAT
Source: [email protected]
http://rhn.redhat.com/errata/RHSA-2014-1400.htmlQuick Info
StatusMODIFIED
CWE
NVD-CWE-Other
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card