Login Request a demo
LO
Vendor
Logicaldoc
3 products with CVEs on record
32
CVEs
0
On KEV
10
New 30D
Products
LC
LogicalDOC Community Edition
LogicalDOC
8.8
10 CVEs0 on KEV10 new
LO
Logicaldoc
Logicaldoc
9.8
19 CVEs0 on KEV0 new
CE
Community Edition
LogicalDOC
8.1
3 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-109206
LC
LogicalDOC Community Edition
LogicalDOC
5.3
0%
Oct 12LogicalDOC Community Edition through 9.3 Username Enumeration via AvatarServlet
CVE-2026-109205
LC
LogicalDOC Community Edition
LogicalDOC
7.5
0%
Oct 12LogicalDOC Community Edition through 9.3 Unauthenticated Upload Disk Exhaustion via UploadServlet
CVE-2026-109204
LC
LogicalDOC Community Edition
LogicalDOC
6.3
0%
Oct 12LogicalDOC Community Edition through 9.3 Forced Password Reset via Unbound PswRecovery Ticket
CVE-2026-109203
LC
LogicalDOC Community Edition
LogicalDOC
6.5
0%
Oct 12LogicalDOC Community Edition through 9.3 Missing Authorization via ConvertPdf Servlet
CVE-2026-109202
LC
LogicalDOC Community Edition
LogicalDOC
6.5
0%
Oct 12LogicalDOC Community Edition through 9.3 Missing Authorization via zip-export Servlet
CVE-2026-109201
LC
LogicalDOC Community Edition
LogicalDOC
8.3
0%
Oct 12LogicalDOC Community Edition through 9.3 Missing Authorization in DocumentService
CVE-2026-109200
LC
LogicalDOC Community Edition
LogicalDOC
6.4
0%
Oct 12LogicalDOC Community Edition through 9.3 SSRF via XMLConverter xml-stylesheet href
CVE-2026-109199
LC
LogicalDOC Community Edition
LogicalDOC
8.8
0%
Oct 12LogicalDOC Community Edition through 9.3 Code Injection via Velocity sendAsEmail Template
CVE-2026-109170
LC
LogicalDOC Community Edition
LogicalDOC
6.5
0%
Oct 12LogicalDOC Community Edition through 9.3 HQL Injection via documents.xml indexed Parameter
CVE-2026-109169
LC
LogicalDOC Community Edition
LogicalDOC
6.5
0%
Oct 12LogicalDOC Community Edition through 9.3 SQL Injection via tags.xml firstLetter
CVE-2019-25258
LO
Logicaldoc
Logicaldoc
7.5
1%
Dec 24LogicalDOC Enterprise 7.7.4 Multiple Post-Authentication Directory Traversal Vulnerabilities
CVE-2025-12547
CE
Community Edition
LogicalDOC
8.1
1%
Oct 31LogicalDOC Community Edition Admin Login login.jsp excessive authentication
CVE-2025-12546
CE
Community Edition
LogicalDOC
5.4
0%
Oct 31LogicalDOC Community Edition API Key creation UI cross site scripting
CVE-2025-11946
CE
Community Edition
LogicalDOC
5.4
0%
Oct 19LogicalDOC Community Edition Add Contact frontend.jsp cross site scripting
CVE-2024-54449
LO
Logicaldoc
Logicaldoc
8.8
1%
Mar 14The API used to interact with documents in the application contains two endpoints with a flaw that allows an authenticated attacker to write a file with controlled contents to an…
CVE-2024-54448
LO
Logicaldoc
Logicaldoc
7.2
1%
Mar 14The Automation Scripting functionality can be exploited by attackers to run arbitrary system commands on the underlying operating system
CVE-2024-12020
LO
Logicaldoc
Logicaldoc
6.1
0%
Mar 14There is a reflected cross-site scripting (XSS) within JSP files used to control application appearance
CVE-2022-47418
LO
Logicaldoc
Logicaldoc
5.4
0%
Feb 7LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the document version comments
CVE-2022-47417
LO
Logicaldoc
Logicaldoc
5.4
0%
Feb 7LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the document file name
CVE-2022-47416
LO
Logicaldoc
Logicaldoc
5.4
0%
Feb 7LogicalDOC Enterprise is vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the in-app chat system
CVE-2022-47415
LO
Logicaldoc
Logicaldoc
5.4
0%
Feb 7LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the in-app messaging system (both…
CVE-2020-13542
LO
Logicaldoc
Logicaldoc
7.8
1%
Dec 3A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5.1 installation
CVE-2020-10366
LO
Logicaldoc
Logicaldoc
7.5
1%
Apr 8LogicalDoc before 8.3.3 allows /servlet.gupld Directory Traversal, a different vulnerability than CVE-2020-9423 and CVE-2020-10365
CVE-2020-9423
LO
Logicaldoc
Logicaldoc
9.8
5%
Mar 18LogicalDoc before 8.3.3 could allow an attacker to upload arbitrary files, leading to command execution or retrieval of data from the database
CVE-2020-10365
LO
Logicaldoc
Logicaldoc
6.5
1%
Mar 18LogicalDoc before 8.3.3 allows SQL Injection
CVE-2019-9723
LO
Logicaldoc
Logicaldoc
7.1
1%
May 30LogicalDOC Community Edition 8.x before 8.2.1 has a path traversal vulnerability that allows reading arbitrary files and the creation of directories, in the class PluginRegistry
CVE-2017-1000023
LO
Logicaldoc
Logicaldoc
5.4
1%
Jul 17LogicalDoc Community Edition 7.5.3 and prior is vulnerable to an XSS when using preview on HTML document
CVE-2017-1000022
LO
Logicaldoc
Logicaldoc
8.8
1%
Jul 17LogicalDoc Community Edition 7.5.3 and prior contain an Incorrect access control which could leave to privilege escalation
CVE-2017-1000021
LO
Logicaldoc
Logicaldoc
8.8
1%
Jul 17LogicalDoc Community Edition 7.5.3 and prior is vulnerable to XXE when indexing XML documents