Oracle Enterprise Repository vulnerabilities, page 2

21 vulnerabilities

Known vulnerabilities in Oracle Enterprise Repository, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.5CVE-2019-12415apachepoi+28
EPSS score
1.00%
In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files from the local filesystem or from internal network resources via XML External Entity (XXE) Processing.