Cloudanix VulnDB

CVE-2025-64403

High · 8.1

CVSS

8.1

EPSS

1.3%

Published

Nov 12, 2025

CISA due date

—

The record

Apache OpenOffice Calc spreadsheet can contain links to other files, in the form of "external data sources". A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause such links to be loaded without prompt. This issue affects Apache OpenOffice: through 4.1.15. Users are recommended to upgrade to version 4.1.16, which fixes the issue.

Affected packages

Ecosystem Package Introduced Fixed