Approved changes feed: RSS · Atom

cpe:2.3:a:phpexcel_project:phpexcel:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPhpexcel Project (42f01ee6-4da1-50ef-b929-9f9461bb3321)
ProductPhpexcel (8fab2ffc-3451-5eaa-a97a-4ec05aa21251)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/phpoffice/phpexcel purl2cpe 2026-06-01 10:15:08.734277
pkg:rpm/fedora/php-phpoffice-phpexcel purl2cpe 2026-06-01 10:15:08.734280
pkg:rpm/opensuse/php7-pear-phpexcel purl2cpe 2026-06-01 10:15:08.734283

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-2054 vulnerable 2026-06-08 05:05:27.451389 Details available
PHPExcel before 1.8.0, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, does not disable external entity loading in libxml, which allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity (XXE) attack.
Published: 2014-06-04T14:00:00.000Z
Updated: 2024-08-06T09:58:16.333Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.