VULNERABILITY INTELLIGENCE

CVE-2022-38745

CVSS score7.8 HIGH
EPSS probability0.87%
CISA KEVNot currently listed
Published2023-03-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path. This may lead to run arbitrary Java code from the current directory.

Weakness classification

  • security@apache.org: CWE-94

Primary references