CVE-2022-38745

—

CVSS 3.1

7.8 high

EPSS

<1%p57

Published

Mar 24, 2023 (Mar 24, 2023)

Modified

Jun 17, 2026

Description

Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path. This may lead to run arbitrary Java code from the current directory.

Vendors: apache
Products: openoffice
Weakness: CWE-94, CWE-427, CWE-1188
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.