diff --git a/.classpath b/.classpath
index ae21292e04..7dfedc818c 100644
--- a/.classpath
+++ b/.classpath
@@ -36,7 +36,7 @@
 	<classpathentry exported="true" kind="lib" path="compile-lib/xmlsec-2.1.0.jar"/>
 	<classpathentry exported="true" kind="lib" path="lib/commons-codec-1.11.jar"/>
 	<classpathentry exported="true" kind="lib" path="lib/commons-logging-1.2.jar"/>
-	<classpathentry exported="true" kind="lib" path="lib/commons-collections4-4.2.jar"/>
+	<classpathentry exported="true" kind="lib" path="lib/commons-collections4-4.3.jar"/>
 	<classpathentry kind="lib" path="lib/commons-math3-3.6.1.jar"/>
 	<classpathentry kind="lib" path="lib/xmlunit-core-2.5.1.jar"/>
 	<classpathentry kind="lib" path="lib/objenesis-2.6.jar"/>
diff --git a/build.gradle b/build.gradle
index bd69a46547..66d800bbe2 100644
--- a/build.gradle
+++ b/build.gradle
@@ -180,7 +180,7 @@ project('main') {
     dependencies {
         compile 'commons-codec:commons-codec:1.11'
         compile 'commons-logging:commons-logging:1.2'
-        compile 'org.apache.commons:commons-collections4:4.2'
+        compile 'org.apache.commons:commons-collections4:4.3'
         compile 'org.apache.commons:commons-math3:3.6.1'
         compile 'javax.xml.bind:jaxb-api:2.3.0'
         compile 'com.sun.xml.bind:jaxb-impl:2.3.0.1'
@@ -231,7 +231,7 @@ project('ooxml') {
 
     dependencies {
         compile 'org.apache.xmlbeans:xmlbeans:3.0.3'
-        compile 'org.apache.commons:commons-collections4:4.2'
+        compile 'org.apache.commons:commons-collections4:4.3'
         compile 'org.apache.commons:commons-math3:3.6.1'
         compile 'org.apache.commons:commons-compress:1.18'
         compile 'org.apache.santuario:xmlsec:2.1.0'
diff --git a/build.xml b/build.xml
index 2bfe6c0607..8bfd20a69d 100644
--- a/build.xml
+++ b/build.xml
@@ -200,9 +200,9 @@ under the License.
     <property name="main.ant.url" value="${repository.m2}/maven2/org/apache/ant/ant/1.10.1/ant-1.10.1.jar"/>
     <property name="main.antlauncher.jar" location="${main.lib}/ant-launcher-1.10.1.jar"/>
     <property name="main.antlauncher.url" value="${repository.m2}/maven2/org/apache/ant/ant-launcher/1.10.1/ant-launcher-1.10.1.jar"/>
-    <property name="main.commons-collections4.jar" location="${main.lib}/commons-collections4-4.2.jar"/>
+    <property name="main.commons-collections4.jar" location="${main.lib}/commons-collections4-4.3.jar"/>
     <property name="main.commons-collections4.url"
-              value="${repository.m2}/maven2/org/apache/commons/commons-collections4/4.2/commons-collections4-4.2.jar"/>
+              value="${repository.m2}/maven2/org/apache/commons/commons-collections4/4.3/commons-collections4-4.3.jar"/>
     <property name="main.commons-math3.jar" location="${main.lib}/commons-math3-3.6.1.jar"/>
     <property name="main.commons-math3.url"
               value="${repository.m2}/maven2/org/apache/commons/commons-math3/3.6.1/commons-math3-3.6.1.jar"/>
@@ -648,6 +648,7 @@ under the License.
                 <include name="commons-compress-1.16*"/>
                 <include name="commons-compress-1.17*"/>
                 <include name="commons-collections4-4.1*"/>
+                <include name="commons-collections4-4.2*"/>
                 <include name="commons-logging-1.1*.jar"/>
                 <include name="findbugs-noUpdateChecks-2.0.3*"/>
                 <include name="jacoco-0.6*"/>
diff --git a/maven/poi.pom b/maven/poi.pom
index fb6640db30..b276b2aecc 100644
--- a/maven/poi.pom
+++ b/maven/poi.pom
@@ -81,7 +81,7 @@
     <dependency>
       <groupId>org.apache.commons</groupId>
       <artifactId>commons-collections4</artifactId>
-      <version>4.2</version>
+      <version>4.3</version>
     </dependency>
     <dependency>
       <groupId>org.apache.commons</groupId>
diff --git a/sonar/main/pom.xml b/sonar/main/pom.xml
index 2c4eed2720..6391d55ef7 100644
--- a/sonar/main/pom.xml
+++ b/sonar/main/pom.xml
@@ -113,7 +113,7 @@
         <dependency>
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-collections4</artifactId>
-            <version>4.2</version>
+            <version>4.3</version>
         </dependency>
         <dependency>
             <groupId>org.apache.commons</groupId>