Xxe

2021-11-0102:15:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.0%

JSON

Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity (XXE) attack to cause a denial of service (DoS) condition to the other servers by processing a specially crafted XML document.

CPENameOperatorVersion
office_server_document_convertereq6.1 mr2
office_server_document_convertereq7.1 mr2
office_server_document_convertereq7.1 mr1
office_server_document_convertereq7.1 mr3
office_server_document_convertereq7.2 mr4
office_server_document_convertereq7.2 mr3
office_server_document_convertereq7.2 mr1
office_server_document_convertereq7.2
office_server_document_convertereq7.2 mr2
office_server_document_convertereq6.0 mr1

Name	Operator	Version
office_server_document_converter	eq	6.1 mr2
office_server_document_converter	eq	7.1 mr2
office_server_document_converter	eq	7.1 mr1
office_server_document_converter	eq	7.1 mr3
office_server_document_converter	eq	7.2 mr4
office_server_document_converter	eq	7.2 mr3
office_server_document_converter	eq	7.2 mr1
office_server_document_converter	eq	7.2
office_server_document_converter	eq	7.2 mr2
office_server_document_converter	eq	6.0 mr1