LO
Product
Logicaldoc
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 9Medium 9Low 0
Watch
Add Logicaldoc to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-9423 | 9.8 | Mar 18 | LogicalDoc before 8.3.3 could allow an attacker to upload arbitrary files, leading to command execution or retrieval of data from the database Affected: before 8.3.3 |
| CVE-2024-54449 | 8.8 | Mar 14 | Remote Code Execution (RCE) via Arbitrary File Write In Document API Affected: before 9.1; before 9.1 |
| CVE-2017-1000022 | 8.8 | Jul 17 | LogicalDoc Community Edition 7.5.3 and prior contain an Incorrect access control which could leave to privilege escalation Affected: through 7.5.3 |
| CVE-2017-1000021 | 8.8 | Jul 17 | LogicalDoc Community Edition 7.5.3 and prior is vulnerable to XXE when indexing XML documents Affected: through 7.5.3 |
| CVE-2025-12547 | 8.1 | Oct 31 | LogicalDOC Community Edition Admin Login login.jsp excessive authentication Affected: through 9.2.1 |
| CVE-2020-13542 | 7.8 | Dec 3 | A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5.1 installation Affected: 8.5.1 |
| CVE-2019-25258 | 7.5 | Dec 24 | LogicalDOC Enterprise 7.7.4 Multiple Post-Authentication Directory Traversal Vulnerabilities Affected: 7.1.1; 7.4.2; 7.5.1; 7.6.2; 7.6.4; 7.7.1; +3 more |
| CVE-2020-10366 | 7.5 | Apr 8 | LogicalDoc before 8.3.3 allows /servlet.gupld Directory Traversal, a different vulnerability than CVE-2020-9423 and CVE-2020-10365 Affected: before 8.3.3 |
| CVE-2024-54448 | 7.2 | Mar 14 | Remote Code Execution (RCE) via Automation Scripting Affected: before 9.1; before 9.1 |
| CVE-2019-9723 | 7.1 | May 30 | LogicalDOC Community Edition 8.x before 8.2.1 has a path traversal vulnerability that allows reading arbitrary files and the creation of directories, in the class PluginRegistry Affected: 8.0 before 8.2.1 |
| CVE-2020-10365 | 6.5 | Mar 18 | LogicalDoc before 8.3.3 allows SQL Injection Affected: before 8.3.3 |
| CVE-2024-12020 | 6.1 | Mar 14 | Reflected Cross-Site Scripting (XSS) Affected: 8.9.3 |
| CVE-2025-12546 | 5.4 | Oct 31 | LogicalDOC Community Edition API Key creation UI cross site scripting Affected: through 9.2.1 |
| CVE-2025-11946 | 5.4 | Oct 19 | LogicalDOC Community Edition Add Contact frontend.jsp cross site scripting Affected: through 9.2.1 |
| CVE-2022-47418 | 5.4 | Feb 7 | LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the document version comments Affected: 8.7.3; 8.8.2 |
| CVE-2022-47417 | 5.4 | Feb 7 | LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the document file name Affected: 8.7.3; 8.8.2 |
| CVE-2022-47416 | 5.4 | Feb 7 | LogicalDOC Enterprise is vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the in-app chat system Affected: 8.8.2 |
| CVE-2022-47415 | 5.4 | Feb 7 | LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the in-app messaging system (both… Affected: 8.7.3; 8.8.2 |
| CVE-2017-1000023 | 5.4 | Jul 17 | LogicalDoc Community Edition 7.5.3 and prior is vulnerable to an XSS when using preview on HTML document Affected: through 7.5.3 |
Showing 19