CVE-2021-20838

Published: Nov 1, 2021Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity (XXE) attack to cause a denial of service (DoS) condition by processing a specially crafted XML document.

Affected (23)

Products: Antennahouse: Office Server Document Converter

Antennahouse

1 product

Office Server Document Converter

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Antennahouse Office Server Document Converter	Before 5.2
Antennahouse Office Server Document Converter	Version 5.2
Antennahouse Office Server Document Converter	Version 6.0
Antennahouse Office Server Document Converter	Version 6.0 mr1
Antennahouse Office Server Document Converter	Version 6.0 mr2
Antennahouse Office Server Document Converter	Version 6.1
Antennahouse Office Server Document Converter	Version 6.1 mr2
Antennahouse Office Server Document Converter	Version 6.1 mr2
Antennahouse Office Server Document Converter	Version 6.1 mr3
Antennahouse Office Server Document Converter	Version 6.1 mr4
Antennahouse Office Server Document Converter	Version 7.0
Antennahouse Office Server Document Converter	Version 7.0 mr1
Antennahouse Office Server Document Converter	Version 7.0 mr2
Antennahouse Office Server Document Converter	Version 7.0 mr3
Antennahouse Office Server Document Converter	Version 7.1
Antennahouse Office Server Document Converter	Version 7.1 mr1
Antennahouse Office Server Document Converter	Version 7.1 mr2
Antennahouse Office Server Document Converter	Version 7.1 mr3
Antennahouse Office Server Document Converter	Version 7.2
Antennahouse Office Server Document Converter	Version 7.2 mr1
Antennahouse Office Server Document Converter	Version 7.2 mr2
Antennahouse Office Server Document Converter	Version 7.2 mr3
Antennahouse Office Server Document Converter	Version 7.2 mr4