high7.5
CVE-2021-20838
Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity (XXE) a…
Impact
Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity (XXE) attack to cause a denial of service (DoS) condition by processing a specially crafted XML document.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Antennahouse | Office Server Document Converter | before 5.2 Versions 5.2, 6.0, 6.1, 7.0, 7.1 |