CVE-2019-9853

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

3.08% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 87.1% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2019-09-27 15:07Z7 YR AGO

Last updated

2024-09-16 17:17Z2 YR AGO

Reserved

2019-03-17

Assigning CNA

Document Fdn.

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

• CWE-116Improper Encoding or Escaping of OutputClass
• CWE-838Inappropriate Encoding for Output ContextBase

Data version

5.1

Document digest

1021cf8fe501ded0a858d8dd6e26e59ff294e9e467536136552e33b13dd814d9

• www.libreoffice.orghttps://www.libreoffice.org/about-us/security/advisories/CVE-2019-9853/x_refsource_CONFIRM
• lists.debian.org[debian-lts-announce] 20191006 [SECURITY] [DLA 1947-1] libreoffice security updatehttps://lists.debian.org/debian-lts-announce/2019/10/msg00005.htmlmailing-listx_refsource_MLIST
• lists.fedoraproject.orgFEDORA-2019-4b0cc75996https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQGBRSD73KTDZ2MPAOL7FBWO3SQVYE5B/vendor-advisoryx_refsource_FEDORA
• lists.apache.org[openoffice-commits] 20191016 svn commit: r1051583 - in /websites/staging/ooo-site/trunk: cgi-bin/ content/ content/security/cves/CVE-2019-9853.htmlhttps://lists.apache.org/thread.html/3a5570ca5cd14ad08e24684c71cfeff3a507f108fe3cf30ba4f58226%40%3Ccommits.openoffice.apache.org%3Emailing-listx_refsource_MLIST
• lists.apache.org[openoffice-commits] 20191016 svn commit: r1868517 - /openoffice/ooo-site/trunk/content/security/cves/CVE-2019-9853.htmlhttps://lists.apache.org/thread.html/4ae0e6e52600f408d943ded079d314733ce188b04b04471464f89c4f%40%3Ccommits.openoffice.apache.org%3Emailing-listx_refsource_MLIST
• lists.apache.org[openoffice-commits] 20191016 svn commit: r1868522 - /openoffice/ooo-site/trunk/content/security/bulletin.htmlhttps://lists.apache.org/thread.html/7394e6b5f78a878bd0c44e9bc9adf90b8cdf49e9adc0f287145aba9b%40%3Ccommits.openoffice.apache.org%3Emailing-listx_refsource_MLIST
• lists.apache.org[openoffice-commits] 20191124 svn commit: r1870322 - /openoffice/ooo-site/trunk/content/security/cves/CVE-2019-9853.htmlhttps://lists.apache.org/thread.html/a540d1b6f9a7ebb206adba02839f654a6ee63a7b0976f559a847e49a%40%3Ccommits.openoffice.apache.org%3Emailing-listx_refsource_MLIST
• lists.apache.org[openoffice-commits] 20191124 svn commit: r1053264 - in /websites/staging/ooo-site/trunk: cgi-bin/ content/ content/security/cves/CVE-2019-9853.htmlhttps://lists.apache.org/thread.html/a5231ad45b030b54828c7b0b62a7e7d4b48481c7cb83ff628e07fa43%40%3Ccommits.openoffice.apache.org%3Emailing-listx_refsource_MLIST
• lists.apache.org[openoffice-commits] 20191124 svn commit: r1053267 - in /websites/staging/ooo-site/trunk: cgi-bin/ content/ content/security/cves/CVE-2019-9853.htmlhttps://lists.apache.org/thread.html/9dc85d9937ad7f101047c53f78c00e8ceb135eaeff7dcf4724b46f2c%40%3Ccommits.openoffice.apache.org%3Emailing-listx_refsource_MLIST
• lists.apache.org[openoffice-commits] 20191124 svn commit: r1870324 - /openoffice/ooo-site/trunk/content/security/cves/CVE-2019-9853.htmlhttps://lists.apache.org/thread.html/70da9481dca267405e1d79e53942264765ef3f55c9a563c3737e3926%40%3Ccommits.openoffice.apache.org%3Emailing-listx_refsource_MLIST
• lists.apache.org[openoffice-commits] 20191124 svn commit: r1870337 - in /openoffice/ooo-site/trunk/content/security/cves: CVE-2019-9853.html CVE-XXXX-YYYY.htmlhttps://lists.apache.org/thread.html/ca216900abd846f0220fe18b95f9f787bdbe0e87fa4eee822073cd69%40%3Ccommits.openoffice.apache.org%3Emailing-listx_refsource_MLIST
• lists.apache.org[openoffice-commits] 20191124 svn commit: r1053270 - in /websites/staging/ooo-site/trunk: cgi-bin/ content/ content/security/cves/CVE-2019-9853.html content/security/cves/CVE-XXXX-YYYY.htmlhttps://lists.apache.org/thread.html/27339e8a9a1e9bb47fbdb939b338256d0356250a1974aaf4d774f683%40%3Ccommits.openoffice.apache.org%3Emailing-listx_refsource_MLIST
• lists.apache.org[openoffice-commits] 20191124 svn commit: r1053271 - in /websites/staging/ooo-site/trunk: cgi-bin/ content/ content/security/cves/CVE-2019-9853.html content/security/cves/CVE-XXXX-YYYY.htmlhttps://lists.apache.org/thread.html/19c917f7c8a0d8f62142046fabfe3e2c7d6091ef1f92b99c6e79e24e%40%3Ccommits.openoffice.apache.org%3Emailing-listx_refsource_MLIST
• lists.apache.org[openoffice-commits] 20191124 svn commit: r1870336 - in /openoffice/ooo-site/trunk/content/security/cves: CVE-2019-9853.html CVE-XXXX-YYYY.htmlhttps://lists.apache.org/thread.html/306a374361891eb17c6cffc99c3d7be1d3152a99c839d4231edc1631%40%3Ccommits.openoffice.apache.org%3Emailing-listx_refsource_MLIST
• lists.opensuse.orgopenSUSE-SU-2019:2709http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00040.htmlvendor-advisoryx_refsource_SUSE
• seclists.org20200220 Open-Xchange Security Advisory 2020-02-19http://seclists.org/fulldisclosure/2020/Feb/23mailing-listx_refsource_FULLDISC
• packetstormsecurity.comhttp://packetstormsecurity.com/files/156474/Open-Xchange-App-Suite-Documents-Server-Side-Request-Forgery.htmlx_refsource_MISC