The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3169 advisory.

    LibreOffice is an open source, community-developed office productivity suite. It includes key desktop     applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a     drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office     suite.

    Security Fix(es):

    * libreoffice: Macro URL arbitrary script execution (CVE-2025-1080)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3269 advisory.

    LibreOffice is an open source, community-developed office productivity suite. It includes key desktop     applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a     drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office     suite.

    Security Fix(es):

    * libreoffice: Macro URL arbitrary script execution (CVE-2025-1080)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of libreoffice installed on the remote host is prior to 5.3.6.1-21. It is, therefore, affected by a vulnerability as referenced in the ALAS2LIBREOFFICE-2025-006 advisory.

    LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint     server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected     versions of LibreOffice a link in a browser using that scheme could be constructed with an embedded inner     URL that when passed to LibreOffice could call internal macros with arbitrary arguments.This issue affects     LibreOffice: from 24.8 before < 24.8.5, from 25.2 before < 25.2.1. (CVE-2025-1080)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3548 advisory.

    LibreOffice is an open source, community-developed office productivity suite. It includes key desktop     applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a     drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office     suite.

    Security Fix(es):

    * libreoffice: Macro URL arbitrary script execution (CVE-2025-1080)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3390 advisory.

    [5.3.6.1-26.0.3]
    - Fix CVE-2025-1080, do not process macros in exotic uri schemes [Orabug: 37770225]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4205 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4205-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                       Daniel Leidert     June 01, 2025                                 https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : libreoffice     Version        : 1:7.0.4-4+deb11u13     CVE ID         : CVE-2025-1080 CVE-2025-2866

    Multiple vulnerabilities were discovered in Libreoffice, an office     productivity software suite.

    CVE-2025-1080

       LibreOffice supports Office URI Schemes to enable browser        integration of LibreOffice with MS SharePoint server. An additional        scheme 'vnd.libreoffice.command' specific to LibreOffice was added.
       In the affected versions of LibreOffice a link in a browser using        that scheme could be constructed with an embedded inner URL that        when passed to LibreOffice could call internal macros with arbitrary        arguments.

    CVE-2025-2866

       LibreOffice allows PDF Signature Spoofing by Improper Validation. In        the affected versions of LibreOffice a flaw in the verification code        for adbe.pkcs7.sha1 signatures could cause invalid signatures to be        accepted as valid

    For Debian 11 bullseye, these problems have been fixed in version     1:7.0.4-4+deb11u13.

    We recommend that you upgrade your libreoffice packages.

    For the detailed security status of libreoffice please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/libreoffice

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: This is a digitally signed message part

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:2868 advisory.

    * libreoffice: Macro URL arbitrary script execution (CVE-2025-1080)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9778:01 advisory.

    * libreoffice: Macro URL arbitrary script execution (CVE-2025-1080)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2025_2868 advisory.

    * libreoffice: Macro URL arbitrary script execution (CVE-2025-1080)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2025_3408 advisory.

    * libreoffice: Macro URL arbitrary script execution (CVE-2025-1080)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
233502	RHEL 8 : libreoffice (RHSA-2025:3169)	Nessus	Red Hat Local Security Checks	2025/3/29	2025/6/5	high
233519	RHEL 8 : libreoffice (RHSA-2025:3269)	Nessus	Red Hat Local Security Checks	2025/3/29	2025/6/5	high
233708	Amazon Linux 2 : libreoffice (ALASLIBREOFFICE-2025-006)	Nessus	Amazon Linux Local Security Checks	2025/4/1	2025/5/5	high
233916	RHEL 9 : libreoffice (RHSA-2025:3548)	Nessus	Red Hat Local Security Checks	2025/4/5	2025/6/5	high
234551	Oracle Linux 7 : libreoffice (ELSA-2025-3390)	Nessus	Oracle Linux Local Security Checks	2025/4/17	2025/9/11	high
237631	Debian dla-4205 : fonts-opensymbol - security update	Nessus	Debian Local Security Checks	2025/6/1	2026/1/21	high
235589	RockyLinux 8 : libreoffice (RLSA-2025:2868)	Nessus	Rocky Linux Local Security Checks	2025/5/7	2025/5/7	high
283208	MiracleLinux 8 : libreoffice-6.4.7.2-19.el8_10.ML.1 (AXSA:2025-9778:01)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/2/13	high
354326	Rocky Linux 8 [CIQ] Security Update: autocorr-af / autocorr-bg / autocorr-ca / autocorr-cs / autocorr-da / etc (crlsa-2025_2868)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
355742	Rocky Linux 9 [CIQ] Security Update: autocorr-af / autocorr-bg / autocorr-ca / autocorr-cs / autocorr-da / etc (crlsa-2025_3408)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high