Apache Software Foundation Apache OpenOffice
27 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-59265 | ≤ 4.1.16 | Apache OpenOffice, Apache OpenOffice: Opening a malicious document can lead to system takeover | HIGH 8.8 | 0.6 % | ||
| CVE-2025-64407 | ≤ 4.1.15 | Apache OpenOffice: URL fetching can be used to exfiltrate arbitrary INI file values and environment variables | MEDIUM 5.3 | 0.5 % | ||
| CVE-2025-64406 | ≤ 4.1.15 | Apache OpenOffice: Possible memory corruption during CSV import | MEDIUM 4.3 | 0.5 % | ||
| CVE-2025-64405 | ≤ 4.1.15 | Apache OpenOffice: Remote documents loaded without prompt via DDE function | HIGH 7.5 | 1.4 % | ||
| CVE-2025-64404 | ≤ 4.1.15 | Apache OpenOffice: Remote documents loaded without prompt via background and bullet images | HIGH 7.5 | 1.3 % | ||
| CVE-2025-64403 | ≤ 4.1.15 | Apache OpenOffice: Remote documents loaded without prompt via "external data sources" in Calc | HIGH 8.1 | 1.3 % | ||
| CVE-2025-64402 | ≤ 4.1.15 | Apache OpenOffice: Remote documents loaded without prompt via OLE objects | MEDIUM 6.5 | 0.6 % | ||
| CVE-2025-64401 | ≤ 4.1.15 | Apache OpenOffice: Remote documents loaded without prompt via IFrame | HIGH 7.5 | 0.9 % | ||
| CVE-2023-47804 | ≤ 4.1.14 | Apache OpenOffice: Macro URL arbitrary script execution | HIGH 8.8 | 2.7 % | ||
| CVE-2022-47502 | ≤ 4.1.13 | Apache OpenOffice: Macro URL arbitrary script execution | HIGH 7.8 | 1.0 % | ||
| CVE-2022-38745 | < 4.1.14 | Apache OpenOffice: Empty entry in Java class path | HIGH 7.8 | 0.9 % | ||
| CVE-2022-37401 | Apache OpenOffice 4 – < 4.1.13 | Apache OpenOffice Weak Master Keys | HIGH 8.8 | 1.9 % | ||
| CVE-2022-37400 | Apache OpenOffice 4 – < 4.1.13 | Apache OpenOffice Static Initialization Vector Allows to Recover Passwords for Web Connections Without Knowing the Master Password | HIGH 8.8 | 1.0 % | ||
| CVE-2021-41832 | Apache OpenOffice – 4.1.10 ; OpenOffice.org – 3.4 | Content Manipulation with Certificate Validation Attack | HIGH 7.5 | 1.3 % | ||
| CVE-2021-41831 | Apache OpenOffice – 4.1.10 ; OpenOffice.org – 3.4 | Timestamp Manipulation with Signature Wrapping | MEDIUM 5.3 | 1.5 % | ||
| CVE-2021-41830 | Apache OpenOffice – 4.1.10 ; OpenOffice.org – 3.4 | Double Certificate Attack | HIGH 7.5 | 1.4 % | ||
| CVE-2021-40439 | Apache OpenOffice – 4.1.10 ; OpenOffice.org – 3.4 | Billion Laughs | MEDIUM 6.5 | 3.9 % | ||
| CVE-2021-28129 | Apache OpenOffice 4.1.8 | DEB packaging for Apache OpenOffice 4.1.8 installed with a non-root userid and groupid | HIGH 7.8 | 0.5 % | ||
| CVE-2021-33035 | Apache OpenOffice – 4.1.10 ; OpenOffice.org – 3.4 | Buffer overflow from a crafted DBF file | HIGH 7.8 | 51 % | ||
| CVE-2021-30245 | Apache OpenOffice – 4.1.9 | Code execution in Apache OpenOffice via non-http(s) schemes in Hyperlinks | HIGH 8.8 | 4.9 % | ||
| CVE-2018-11790 | Apache OpenOffice 4.1.5 and earlier | When loading a document with Apache Open Office 4.1.5 and earlier with smaller end line termination than the operating system uses, the defe | HIGH 7.8 | 1.0 % | ||
| CVE-2017-3157 | 4.0.0 to 4.1.3, and some previous releases, including some using our old OpenOffice.org brand | By exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could craft a document that allows reading in a f | MEDIUM 5.5 | 3.1 % | ||
| CVE-2017-12608 | 4.0.0 to 4.1.3, and some previous releases, including some using our old OpenOffice.org brand | A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in ImportOldFormatStyles, allows attackers to cra | HIGH 7.8 | 2.9 % | ||
| CVE-2017-12607 | 4.0.0 to 4.1.3, and some previous releases, including some using our old OpenOffice.org brand | A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documen | HIGH 7.8 | 2.6 % | ||
| CVE-2017-9806 | 4.0.0 to 4.1.3, and some previous releases, including some using our old OpenOffice.org brand | A vulnerability in the OpenOffice Writer DOC file parser before 4.1.4, and specifically in the WW8Fonts Constructor, allows attackers to cra | HIGH 7.8 | 1.8 % | ||
| CVE-2016-6804 | 4.0.0 to 4.1.2 ; older releases are also affected, including some branded as OpenOffice.org | The Apache OpenOffice installer (versions prior to 4.1.3, including some branded as OpenOffice.org) for Windows contains a defective operati | HIGH 7.8 | 3.0 % | ||
| CVE-2016-6803 | 4.0.0 to 4.1.2 ; Older versions, including some using the previous OpenOffice.org brand, are also affected. | An installer defect known as an "unquoted Windows search path vulnerability" affected the Apache OpenOffice before 4.1.3 installers for Wind | HIGH 7.8 | 2.1 % |