Login Request a demo
LO
Vendor
LogicalDOC
5 products with CVEs on record
54
CVEs
0
On KEV
10
New 30D
Products
LC
LogicalDOC Community Edition
LogicalDOC
8.8
13 CVEs0 on KEV10 new
LO
Logicaldoc
Logicaldoc
9.8
19 CVEs0 on KEV0 new
LE
LogicalDOC Enterprise
LogicalDOC
8.8
12 CVEs0 on KEV0 new
LC
LogicalDOC Community
LogicalDOC
8.8
7 CVEs0 on KEV0 new
CE
Community Edition
LogicalDOC
8.1
3 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-109206
LC
LogicalDOC Community Edition
LogicalDOC
5.3
0%
Oct 12LogicalDOC Community Edition through 9.3 Username Enumeration via AvatarServlet
CVE-2026-109205
LC
LogicalDOC Community Edition
LogicalDOC
7.5
0%
Oct 12LogicalDOC Community Edition through 9.3 Unauthenticated Upload Disk Exhaustion via UploadServlet
CVE-2026-109204
LC
LogicalDOC Community Edition
LogicalDOC
6.3
0%
Oct 12LogicalDOC Community Edition through 9.3 Forced Password Reset via Unbound PswRecovery Ticket
CVE-2026-109203
LC
LogicalDOC Community Edition
LogicalDOC
6.5
0%
Oct 12LogicalDOC Community Edition through 9.3 Missing Authorization via ConvertPdf Servlet
CVE-2026-109202
LC
LogicalDOC Community Edition
LogicalDOC
6.5
0%
Oct 12LogicalDOC Community Edition through 9.3 Missing Authorization via zip-export Servlet
CVE-2026-109201
LC
LogicalDOC Community Edition
LogicalDOC
8.3
0%
Oct 12LogicalDOC Community Edition through 9.3 Missing Authorization in DocumentService
CVE-2026-109200
LC
LogicalDOC Community Edition
LogicalDOC
6.4
0%
Oct 12LogicalDOC Community Edition through 9.3 SSRF via XMLConverter xml-stylesheet href
CVE-2026-109199
LC
LogicalDOC Community Edition
LogicalDOC
8.8
0%
Oct 12LogicalDOC Community Edition through 9.3 Code Injection via Velocity sendAsEmail Template
CVE-2026-109170
LC
LogicalDOC Community Edition
LogicalDOC
6.5
0%
Oct 12LogicalDOC Community Edition through 9.3 HQL Injection via documents.xml indexed Parameter
CVE-2026-109169
LC
LogicalDOC Community Edition
LogicalDOC
6.5
0%
Oct 12LogicalDOC Community Edition through 9.3 SQL Injection via tags.xml firstLetter
CVE-2019-25258
LO
Logicaldoc
Logicaldoc
7.5
1%
Dec 24LogicalDOC Enterprise 7.7.4 Multiple Post-Authentication Directory Traversal Vulnerabilities
CVE-2025-12547
CE
Community Edition
LogicalDOC
8.1
1%
Oct 31LogicalDOC Community Edition Admin Login login.jsp excessive authentication
CVE-2025-12546
CE
Community Edition
LogicalDOC
5.4
0%
Oct 31LogicalDOC Community Edition API Key creation UI cross site scripting
CVE-2025-11946
CE
Community Edition
LogicalDOC
5.4
0%
Oct 19LogicalDOC Community Edition Add Contact frontend.jsp cross site scripting
CVE-2024-12245
LC
LogicalDOC Community
LogicalDOC
8.7
0%
Mar 14Blind SQL Injection in Logout
CVE-2024-12020
LE
LogicalDOC Enterprise
LogicalDOC
6.1
0%
Mar 14Reflected Cross-Site Scripting (XSS)
CVE-2024-12019
LC
LogicalDOC Community
LogicalDOC
7.1
0%
Mar 14Arbitrary File Read via Document API
CVE-2024-54449
LC
LogicalDOC Community
LogicalDOC
8.8
1%
Mar 14Remote Code Execution (RCE) via Arbitrary File Write In Document API
CVE-2024-54448
LE
LogicalDOC Enterprise
LogicalDOC
7.2
1%
Mar 14Remote Code Execution (RCE) via Automation Scripting
CVE-2024-54447
LE
LogicalDOC Enterprise
LogicalDOC
7.1
0%
Mar 14Blind SQLi in Saved Search
CVE-2024-54446
LE
LogicalDOC Enterprise
LogicalDOC
7.1
0%
Mar 14Blind SQLi in Document History
CVE-2024-54445
LE
LogicalDOC Enterprise
LogicalDOC
8.7
0%
Mar 14Blind SQLi in Login
CVE-2022-47418
LC
LogicalDOC Community Edition
LogicalDOC
5.4
0%
Feb 7LogicalDOC Document Version Comment Stored XSS
CVE-2022-47417
LC
LogicalDOC Community Edition
LogicalDOC
5.4
0%
Feb 7LogicalDOC Document File Name Stored XSS
CVE-2022-47416
LE
LogicalDOC Enterprise
LogicalDOC
5.4
0%
Feb 7LogicalDOC Chat Stored XSS
CVE-2022-47415
LC
LogicalDOC Community Edition
LogicalDOC
5.4
0%
Feb 7LogicalDOC Messaging Stored XSS
CVE-2020-13542
LO
Logicaldoc
Logicaldoc
7.8
1%
Dec 3A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5.1 installation
CVE-2020-10366
LO
Logicaldoc
Logicaldoc
7.5
1%
Apr 8LogicalDoc before 8.3.3 allows /servlet.gupld Directory Traversal, a different vulnerability than CVE-2020-9423 and CVE-2020-10365
CVE-2020-9423
LO
Logicaldoc
Logicaldoc
9.8
5%
Mar 18LogicalDoc before 8.3.3 could allow an attacker to upload arbitrary files, leading to command execution or retrieval of data from the database
CVE-2020-10365
LO
Logicaldoc
Logicaldoc
6.5
1%
Mar 18LogicalDoc before 8.3.3 allows SQL Injection
CVE-2019-9723
LO
Logicaldoc
Logicaldoc
7.1
1%
May 30LogicalDOC Community Edition 8.x before 8.2.1 has a path traversal vulnerability that allows reading arbitrary files and the creation of directories, in the class PluginRegistry
CVE-2017-1000023
LO
Logicaldoc
Logicaldoc
5.4
1%
Jul 17LogicalDoc Community Edition 7.5.3 and prior is vulnerable to an XSS when using preview on HTML document
CVE-2017-1000022
LO
Logicaldoc
Logicaldoc
8.8
1%
Jul 17LogicalDoc Community Edition 7.5.3 and prior contain an Incorrect access control which could leave to privilege escalation
CVE-2017-1000021
LO
Logicaldoc
Logicaldoc
8.8
1%
Jul 17LogicalDoc Community Edition 7.5.3 and prior is vulnerable to XXE when indexing XML documents