Vulnerabilities > CVE-2021-28684 - XXE vulnerability in Powerarchiver
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
The XML parser used in ConeXware PowerArchiver before 20.10.02 allows processing of external entities, which might lead to exfiltration of local files over the network (via an XXE attack).
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 5 |