CVE:CVE-2019-12415
CNNVD:CNNVD-201910-1431
Apache POI是美国阿帕奇（Apache）基金会的一个开源函数库，它提供API给Java程序可对Microsoft Office格式档案进行读和写。
Apache POI 4.1.0及之前版本中存在代码问题漏洞。攻击者可借助特制的文档利用该漏洞读取本地文件系统中或网络资源中的文件。
solution:Upgrade apache poi to a higher version than 4.1.0,and avoid the version (,4.1.0]; Upgrade oracle application_testing_suite to a higher version than 12.5.0.3,13.1.0.1,13.2.0.1,13.3.0.1,and avoid the version 12.5.0.3,13.1.0.1,13.2.0.1,13.3.0.1; Upgrade oracle banking_enterprise_originations to a higher version than 2.7.0,2.8.0,and avoid the version 2.7.0,2.8.0; Upgrade oracle banking_enterprise_product_manufacturing to a higher version than 2.7.0,2.8.0,and avoid the version 2.7.0,2.8.0; Upgrade oracle banking_payments to a higher version than 14.0.0,14.1.0,and avoid the version 14.0.0,14.1.0; Upgrade oracle banking_platform to a higher version than 2.4.0,2.4.1,2.5.0,2.6.0,2.6.1,2.6.2,2.7.0,2.7.1,2.9.0,and avoid the version 2.4.0,2.4.1,2.5.0,2.6.0,2.6.1,2.6.2,2.7.0,2.7.1,2.9.0; Upgrade oracle big_data_discovery to a higher version than 1.6,and avoid the version 1.6; Upgrade oracle communications_diameter_signaling_router_idih to a higher version than :8.0.0,:8.2.2,and avoid the version :8.0.0,:8.2.2; Upgrade oracle endeca_information_discovery_studio to a higher version than 3.2.0,and avoid the version 3.2.0; Upgrade oracle enterprise_manager_base_platform to a higher version than 12.1.0.5,13.3.0.0,13.4.0.0,and avoid the version 12.1.0.5,13.3.0.0,13.4.0.0; Upgrade oracle enterprise_repository to a higher version than 12.1.3.0.0,and avoid the version 12.1.3.0.0; Upgrade oracle financial_services_analytical_applications_infrastructure to a higher version than 8.0.9,and avoid the version [8.0.6,8.0.9]; Upgrade oracle financial_services_market_risk_measurement_and_management to a higher version than 8.0.6,8.0.8,and avoid the version 8.0.6,8.0.8; Upgrade oracle flexcube_private_banking to a higher version than 12.0.0,12.1.0,and avoid the version 12.0.0,12.1.0; Upgrade oracle hyperion_infrastructure_technology to a higher version than 11.1.2.4,and avoid the version 11.1.2.4; Upgrade oracle instantis_enterprisetrack to a higher version than 17.1,17.2,17.3,and avoid the version 17.1,17.2,17.3; Upgrade oracle insurance_policy_administration_j2ee to a higher version than 11.0.2,11.1.0,11.2.0,and avoid the version 11.0.2,11.1.0,11.2.0; Upgrade oracle insurance_rules_palette to a higher version than 10.2.0,10.2.4,11.0.2,11.1.0,11.2.0,and avoid the version 10.2.0,10.2.4,11.0.2,11.1.0,11.2.0; Upgrade oracle jdeveloper to a higher version than 12.2.1.4.0,and avoid the version 12.2.1.4.0; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.57,8.58,8.59,and avoid the version 8.57,8.58,8.59; Upgrade oracle primavera_gateway to a higher version than 17.12.6,18.8.8.1,and avoid the version 17.12.6,18.8.8.1; Upgrade oracle primavera_unifier to a higher version than 17.12,16.1,16.2,18.8,19.12,and avoid the version [17.7,17.12],16.1,16.2,18.8,19.12; Upgrade oracle retail_clearance_optimization_engine to a higher version than 14.0,and avoid the version 14.0; Upgrade oracle retail_order_broker to a higher version than 15.0,16.0,and avoid the version 15.0,16.0; Upgrade oracle retail_predictive_application_server to a higher version than 15.0.3,16.0.3,and avoid the version 15.0.3,16.0.3; Upgrade oracle webcenter_portal to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle webcenter_sites to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0