LO
Product
Logicaldoc
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 9Medium 9Low 0
Watch
Add Logicaldoc to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-54449 | 8.8 | Mar 14 | Remote Code Execution (RCE) via Arbitrary File Write In Document API Affected: before 9.1; before 9.1 |
| CVE-2017-1000022 | 8.8 | Jul 17 | LogicalDoc Community Edition 7.5.3 and prior contain an Incorrect access control which could leave to privilege escalation Affected: through 7.5.3 |
| CVE-2017-1000021 | 8.8 | Jul 17 | LogicalDoc Community Edition 7.5.3 and prior is vulnerable to XXE when indexing XML documents Affected: through 7.5.3 |
| CVE-2025-12547 | 8.1 | Oct 31 | LogicalDOC Community Edition Admin Login login.jsp excessive authentication Affected: through 9.2.1 |
| CVE-2020-13542 | 7.8 | Dec 3 | A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5.1 installation Affected: 8.5.1 |
| CVE-2019-25258 | 7.5 | Dec 24 | LogicalDOC Enterprise 7.7.4 Multiple Post-Authentication Directory Traversal Vulnerabilities Affected: 7.1.1; 7.4.2; 7.5.1; 7.6.2; 7.6.4; 7.7.1; +3 more |
| CVE-2020-10366 | 7.5 | Apr 8 | LogicalDoc before 8.3.3 allows /servlet.gupld Directory Traversal, a different vulnerability than CVE-2020-9423 and CVE-2020-10365 Affected: before 8.3.3 |
| CVE-2024-54448 | 7.2 | Mar 14 | Remote Code Execution (RCE) via Automation Scripting Affected: before 9.1; before 9.1 |
| CVE-2019-9723 | 7.1 | May 30 | LogicalDOC Community Edition 8.x before 8.2.1 has a path traversal vulnerability that allows reading arbitrary files and the creation of directories, in the class PluginRegistry Affected: 8.0 before 8.2.1 |
Showing 9