Medium severity6.5NVD Advisory· Published Nov 1, 2021· Updated Jun 17, 2026

CVE-2021-20839

Description

Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity (XXE) attack to cause a denial of service (DoS) condition to the other servers by processing a specially crafted XML document.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Office Server Document Converter/Office Server Document Converterllm-create
Range: <=V7.2MR4, <=V7.1MR7
Antenna House/Office Server Document Converterllm-fuzzy
Range: <=V7.2MR4, <=V7.1MR7
Antenna House, Inc./Office Server Document Converterv5
Range: V7.2MR4 and earlier and V7.1MR7 and earlier

Patches

Vulnerability mechanics

References

www.antenna.co.jp/news/2021/osdc72-20211027.htmlnvdPatchVendor Advisory
jvn.jp/en/jp/JVN33453839/index.htmlnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000