PT-2025-46583

CVE-2025-64403

Published

2025-11-12

Updated

2026-10-18

Description by

CVSS 2.0

9.4

High

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Apache OpenOffice versions through 4.1.15

Description Apache OpenOffice Calc spreadsheets can include links to external files, known as "external data sources". A missing authorization check in Apache OpenOffice allowed an attacker to create a document that would load these links without user confirmation.

Recommendations Upgrade to version 4.1.16 to resolve this issue.

Exploitability

Fix

Impacts

Researchers

Reginaldo Silva

Vendors

Affected products

Weakness enumeration

CWE-862: Missing Authorization

Related identifiers

CVE-2025-64403