libreoffice (SUSE:Linux Enterprise Software Development Kit 12 SP4) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Software Development Kit 12 SP4 package libreoffice, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (11)

• CVE-2019-9850 — CVSS 9.8 (critical): LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands…
• CVE-2019-9851 — CVSS 9.8 (critical): LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands…
• CVE-2019-9848 — CVSS 9.8 (critical): LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as…
• CVE-2019-9855 — CVSS 9.8 (critical): LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands…
• CVE-2019-9853 — CVSS 7.8 (high): LibreOffice documents can contain macros. The execution of those macros is controlled by the document security settings, typically…
• CVE-2018-16858 — CVSS 7.8 (high): It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute…
• CVE-2019-9852 — CVSS 7.8 (high): LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as…
• CVE-2019-9854 — CVSS 7.8 (high): LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as…
• CVE-2018-10583 — CVSS 7.5 (high): An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate…
• CVE-2020-12801 — CVSS 5.3 (medium): If LibreOffice has an encrypted document open and crashes, that document is auto-saved encrypted. On restart, LibreOffice offers to restore…
• CVE-2019-9849 — CVSS 4.3 (medium): LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This…