CVE-2021-28684: Powerarchiver

Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days.

The XML parser used in ConeXware PowerArchiver before 20.10.02 allows processing of external entities, which might lead to exfiltration of local files over the network (via an XXE attack).

Affected products

• Powerarchiver Powerarchiver: before 20.10.02 (fixed in 20.10.02)

Published 2021-06-21. Last modified 2026-06-17.