cve.bz

CVE-2022-38745

7.8 highEPSS 0.9%

High (7.8) in apache openoffice. EPSS 0.9% chance of exploitation in the next 30 days.

Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path. This may lead to run arbitrary Java code from the current directory.

Severity

CVSS 3.1

7.8 high
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWEs
CWE-94, CWE-427, CWE-1188
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON