NetSight
high7.5

CVE-2021-20838

Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity (XXE) a…

Impact

Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity (XXE) attack to cause a denial of service (DoS) condition by processing a specially crafted XML document.

Affected products

VendorProductAffected versions
AntennahouseOffice Server Document Converter
before 5.2
Versions 5.2, 6.0, 6.1, 7.0, 7.1

Weakness classification

References