Authorization Vulnerability in Apache OpenOffice Calc Spreadsheet
CVE-2025-64403

8.1HIGH

Key Information:

Vendor

Apache
Status
Apache Openoffice
Vendor
CVE Published:
12 November 2025

What is CVE-2025-64403?

An authorization vulnerability in Apache OpenOffice Calc allows attackers to create malicious documents containing links to external data sources. These links may be loaded without user prompts, posing a significant risk of remote data access. Users of Apache OpenOffice, particularly those on version 4.1.15, are urged to upgrade to version 4.1.16 to mitigate this security issue.

Affected Version(s)

Apache OpenOffice 0 <= 4.1.15

References

https://www.openoffice.org/security/cves/CVE-2025-64403.html
vendor-advisory
https://lists.apache.org/thread/t7c6jhvdb00xtgd9vvn7h5sq9...
vendor-advisory

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Reginaldo Silva of ubercomp.com
JSON
.