LC
Product
LogicalDOC Community Edition
10
CVEs
0
On KEV
8.8
Max CVSS
10
New 30D
Severity mix
Critical 0High 3Medium 7Low 0
Watch
Add LogicalDOC Community Edition to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-109199 | 8.8 | Oct 12 | LogicalDOC Community Edition through 9.3 Code Injection via Velocity sendAsEmail Template Affected: through 9.3 |
| CVE-2026-109201 | 8.3 | Oct 12 | LogicalDOC Community Edition through 9.3 Missing Authorization in DocumentService Affected: through 9.3 |
| CVE-2026-109205 | 7.5 | Oct 12 | LogicalDOC Community Edition through 9.3 Unauthenticated Upload Disk Exhaustion via UploadServlet Affected: through 9.3 |
| CVE-2026-109203 | 6.5 | Oct 12 | LogicalDOC Community Edition through 9.3 Missing Authorization via ConvertPdf Servlet Affected: through 9.3 |
| CVE-2026-109202 | 6.5 | Oct 12 | LogicalDOC Community Edition through 9.3 Missing Authorization via zip-export Servlet Affected: through 9.3 |
| CVE-2026-109170 | 6.5 | Oct 12 | LogicalDOC Community Edition through 9.3 HQL Injection via documents.xml indexed Parameter Affected: through 9.3 |
| CVE-2026-109169 | 6.5 | Oct 12 | LogicalDOC Community Edition through 9.3 SQL Injection via tags.xml firstLetter Affected: through 9.3 |
| CVE-2026-109200 | 6.4 | Oct 12 | LogicalDOC Community Edition through 9.3 SSRF via XMLConverter xml-stylesheet href Affected: through 9.3 |
| CVE-2026-109204 | 6.3 | Oct 12 | LogicalDOC Community Edition through 9.3 Forced Password Reset via Unbound PswRecovery Ticket Affected: through 9.3 |
| CVE-2026-109206 | 5.3 | Oct 12 | LogicalDOC Community Edition through 9.3 Username Enumeration via AvatarServlet Affected: through 9.3 |
Showing 10