CVE-2015-3271: Apache Tika

Medium severity, CVSS 5.3. EPSS: 6.5% chance of exploitation in the next 30 days.

Apache Tika server (aka tika-server) in Apache Tika 1.9 might allow remote attackers to read arbitrary files via the HTTP fileUrl header.

Affected products

• Apache Tika: version 1.9 only

Published 2016-12-15. Last modified 2026-06-17.