LO
Product
Logicaldoc
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 9Medium 9Low 0
Watch
Add Logicaldoc to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-10365 | 6.5 | Mar 18 | LogicalDoc before 8.3.3 allows SQL Injection Affected: before 8.3.3 |
| CVE-2024-12020 | 6.1 | Mar 14 | Reflected Cross-Site Scripting (XSS) Affected: 8.9.3 |
| CVE-2025-12546 | 5.4 | Oct 31 | LogicalDOC Community Edition API Key creation UI cross site scripting Affected: through 9.2.1 |
| CVE-2025-11946 | 5.4 | Oct 19 | LogicalDOC Community Edition Add Contact frontend.jsp cross site scripting Affected: through 9.2.1 |
| CVE-2022-47418 | 5.4 | Feb 7 | LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the document version comments Affected: 8.7.3; 8.8.2 |
| CVE-2022-47417 | 5.4 | Feb 7 | LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the document file name Affected: 8.7.3; 8.8.2 |
| CVE-2022-47416 | 5.4 | Feb 7 | LogicalDOC Enterprise is vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the in-app chat system Affected: 8.8.2 |
| CVE-2022-47415 | 5.4 | Feb 7 | LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the in-app messaging system (both… Affected: 8.7.3; 8.8.2 |
| CVE-2017-1000023 | 5.4 | Jul 17 | LogicalDoc Community Edition 7.5.3 and prior is vulnerable to an XSS when using preview on HTML document Affected: through 7.5.3 |
Showing 9
