Logicaldoc vulnerabilities

Products

• Logicaldoc 19
• Community Edition 13
• Enterprise 12
• Community 7
• Community Edition 3

Newest

• logicaldoc community edition LogicalDOC Community Edition through 9.3 Username Enumeration via AvatarServlet CVE-2026-109206 6.9 MediumOctober 12, 2026
• logicaldoc community edition LogicalDOC Community Edition through 9.3 Unauthenticated Upload Disk Exhaustion via UploadServlet CVE-2026-109205 8.7 HighOctober 12, 2026
• logicaldoc community edition LogicalDOC Community Edition through 9.3 Forced Password Reset via Unbound PswRecovery Ticket CVE-2026-109204 5.3 MediumOctober 12, 2026
• logicaldoc community edition LogicalDOC Community Edition through 9.3 Missing Authorization via ConvertPdf Servlet CVE-2026-109203 7.1 HighOctober 12, 2026
• logicaldoc community edition LogicalDOC Community Edition through 9.3 Missing Authorization via zip-export Servlet CVE-2026-109202 7.1 HighOctober 12, 2026
• logicaldoc community edition LogicalDOC Community Edition through 9.3 Missing Authorization in DocumentService CVE-2026-109201 8.7 HighOctober 12, 2026
• logicaldoc community edition LogicalDOC Community Edition through 9.3 SSRF via XMLConverter xml-stylesheet href CVE-2026-109200 5.3 MediumOctober 12, 2026
• logicaldoc community edition LogicalDOC Community Edition through 9.3 Code Injection via Velocity sendAsEmail Template CVE-2026-109199 8.7 HighOctober 12, 2026
• logicaldoc community edition LogicalDOC Community Edition through 9.3 HQL Injection via documents.xml indexed Parameter CVE-2026-109170 7.1 HighOctober 12, 2026
• logicaldoc community edition LogicalDOC Community Edition through 9.3 SQL Injection via tags.xml firstLetter CVE-2026-109169 7.1 HighOctober 12, 2026
• logicaldoc, logicaldoc srl enterprise +1 more LogicalDOC Enterprise 7.7.4 Multiple Post-Authentication Directory Traversal Vulnerabilities CVE-2019-25258 7.1 HighDecember 24, 2025
• logicaldoc community edition, logicaldoc +1 more LogicalDOC Community Edition Admin Login login.jsp excessive authentication CVE-2025-12547 6.3 MediumOctober 31, 2025
• logicaldoc community edition, logicaldoc +1 more LogicalDOC Community Edition API Key creation UI cross site scripting CVE-2025-12546 5.1 MediumOctober 31, 2025
• logicaldoc community edition, logicaldoc +1 more LogicalDOC Community Edition Add Contact frontend.jsp cross site scripting CVE-2025-11946 5.1 MediumOctober 19, 2025
• logicaldoc community, enterprise +1 more Blind SQL Injection in Logout CVE-2024-12245 8.7 HighMarch 14, 2025
• logicaldoc, logicaldoc enterprise +1 more Reflected Cross-Site Scripting (XSS) CVE-2024-12020 6.4 MediumMarch 14, 2025
• logicaldoc community, enterprise +1 more Arbitrary File Read via Document API CVE-2024-12019 7.1 HighMarch 14, 2025
• logicaldoc, logicaldoc community, enterprise +2 more Remote Code Execution (RCE) via Arbitrary File Write In Document API CVE-2024-54449 8.7 HighMarch 14, 2025
• logicaldoc, logicaldoc community, enterprise +2 more Remote Code Execution (RCE) via Automation Scripting CVE-2024-54448 8.6 HighMarch 14, 2025
• logicaldoc community, enterprise +1 more Blind SQLi in Saved Search CVE-2024-54447 7.1 HighMarch 14, 2025
• logicaldoc community, enterprise +1 more Blind SQLi in Document History CVE-2024-54446 7.1 HighMarch 14, 2025
• logicaldoc community, enterprise +1 more Blind SQLi in Login CVE-2024-54445 8.7 HighMarch 14, 2025
• logicaldoc, logicaldoc community edition, enterprise +2 more LogicalDOC Document Version Comment Stored XSS CVE-2022-47418 5.4 MediumFebruary 7, 2023
• logicaldoc, logicaldoc community edition, enterprise +2 more LogicalDOC Document File Name Stored XSS CVE-2022-47417 5.4 MediumFebruary 7, 2023
• logicaldoc, logicaldoc enterprise +1 more LogicalDOC Chat Stored XSS CVE-2022-47416 5.4 MediumFebruary 7, 2023
• logicaldoc, logicaldoc community edition, enterprise +2 more LogicalDOC Messaging Stored XSS CVE-2022-47415 5.4 MediumFebruary 7, 2023
• logicaldoc A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5... CVE-2020-13542 9.3 CriticalDecember 3, 2020
• logicaldoc LogicalDoc before 8.3.3 allows /servlet.gupld Directory Traversal, a different vulnerability than... CVE-2020-10366 7.5 HighApril 7, 2020
• logicaldoc LogicalDoc before 8.3.3 allows SQL Injection. LogicalDoc populates the list of available... CVE-2020-10365 6.5 MediumMarch 18, 2020
• logicaldoc LogicalDoc before 8.3.3 could allow an attacker to upload arbitrary files, leading to command... CVE-2020-9423 9.8 CriticalMarch 18, 2020
• logicaldoc LogicalDOC Community Edition 8.x before 8.2.1 has a path traversal vulnerability that allows... CVE-2019-9723 7.1 HighMay 30, 2019
• logicaldoc LogicalDoc Community Edition 7.5.3 and prior is vulnerable to an XSS when using preview on HTML... CVE-2017-1000023 5.4 MediumJuly 13, 2017
• logicaldoc LogicalDoc Community Edition 7.5.3 and prior contain an Incorrect access control which could... CVE-2017-1000022 8.8 HighJuly 13, 2017
• logicaldoc LogicalDoc Community Edition 7.5.3 and prior is vulnerable to XXE when indexing XML documents. CVE-2017-1000021 8.8 HighJuly 13, 2017