Known vulnerabilities in OpenOffice

Vendor: Apache Foundation
Software: OpenOffice
Software CPE: cpe:2.3:a:apache_foundation:openoffice:*:*:*:*:*:*:*:*
Website: https://www.apache.org
Total vulnerabilities: 30
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenOffice OpenOffice is affected by 30 known vulnerabilities: 1 critical, 12 high, 11 medium, 6 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118361 - Missing Authorization
CVE-2025-64407		 CWE-862 Medium
No
No
 4.1.16 12.11.2025 SB2025111212
#VU118360 - Memory corruption
CVE-2025-64406		 CWE-119 High
No
No
 4.1.16 12.11.2025 SB2025111212
#VU118359 - Missing Authorization
CVE-2025-64405		 CWE-862 Medium
No
No
 4.1.16 12.11.2025 SB2025111212
#VU118358 - Missing Authorization
CVE-2025-64404		 CWE-862 Medium
No
No
 4.1.16 12.11.2025 SB2025111212
#VU118357 - Missing Authorization
CVE-2025-64403		 CWE-862 Medium
No
No
 4.1.16 12.11.2025 SB2025111212
#VU118356 - Missing Authorization
CVE-2025-64401		 CWE-862 Medium
No
No
 4.1.16 12.11.2025 SB2025111212
#VU118355 - Missing Authorization
CVE-2025-64402		 CWE-862 Medium
No
No
 4.1.16 12.11.2025 SB2025111212
#VU84853 - Insufficient UI Warning of Dangerous Operations
CVE-2012-5639		 CWE-357 Medium
No
No
 4.1.15 29.12.2023 SB2023122832
#VU84850 - Improper input validation
CVE-2023-47804		 CWE-20 High
No
No
 4.1.15 28.12.2023 SB2023122832
#VU77534 - External Control of File Name or Path
CVE-2023-1183		 CWE-73 High
No
No
 4.1.15 20.06.2023 SB2023062004
SB2023062203
SB2023062204
and 14 more
#VU74032 - Improper input validation
CVE-2022-47502		 CWE-20 High
No
No
 4.1.14 25.03.2023 SB2023032503
#VU74031 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-38745		 CWE-94 High
No
No
 4.1.14 25.03.2023 SB2023032503
SB2023032504
SB2023041723
and 4 more
#VU68718 - Use After Free
CVE-2022-43680		 CWE-416 Medium
No
No
 4.1.15 25.10.2022 SB2022102560
SB2022102566
SB2022103010
and 99 more
#VU66496 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2022-37400		 CWE-338 Low
No
No
 4.1.13 15.08.2022 SB2022081526
#VU66495 - Inadequate Encryption Strength
CVE-2022-37401		 CWE-326 Low
No
No
 4.1.13 15.08.2022 SB2022081526
#VU57211 - Incorrect Default Permissions
CVE-2021-28129		 CWE-276 Low
No
No
 4.1.9 11.10.2021 SB2021101111
#VU57210 - Memory corruption
CVE-2021-33035		 CWE-119 High
No
No
 4.1.11 11.10.2021 SB2021101111
#VU57209 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2021-40439		 CWE-776 Medium
No
No
 4.1.11 11.10.2021 SB2021101111
#VU57207 - Improper Verification of Cryptographic Signature
CVE-2021-41832		 CWE-347 Medium
No
No
 4.1.11 11.10.2021 SB2021101111
#VU57206 - Improper Verification of Cryptographic Signature
CVE-2021-41830		 CWE-347 Medium
No
No
 4.1.11 11.10.2021 SB2021101111


Showing elements 1 - 20 out of 30