CVE-2014-3574

MEDIUM · CVSS 4.3 EPSS 7.40%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-09-04 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2014-3574

Severity

MEDIUM

CVSS

4.3

EPSS

7.40%

Apache

Original NVD Description

Apache POI before 3.10.1 and 3.11.x before 3.11-beta2 allows remote attackers to cause a denial of service (CPU consumption and crash) via a crafted OOXML file, aka an XML Entity Expansion (XEE) attack.