Logicaldoc Community Edition vulnerabilities

• logicaldoc community edition LogicalDOC Community Edition through 9.3 Username Enumeration via AvatarServlet CVE-2026-109206 6.9 MediumOctober 12, 2026
• logicaldoc community edition LogicalDOC Community Edition through 9.3 Unauthenticated Upload Disk Exhaustion via UploadServlet CVE-2026-109205 8.7 HighOctober 12, 2026
• logicaldoc community edition LogicalDOC Community Edition through 9.3 Forced Password Reset via Unbound PswRecovery Ticket CVE-2026-109204 5.3 MediumOctober 12, 2026
• logicaldoc community edition LogicalDOC Community Edition through 9.3 Missing Authorization via ConvertPdf Servlet CVE-2026-109203 7.1 HighOctober 12, 2026
• logicaldoc community edition LogicalDOC Community Edition through 9.3 Missing Authorization via zip-export Servlet CVE-2026-109202 7.1 HighOctober 12, 2026
• logicaldoc community edition LogicalDOC Community Edition through 9.3 Missing Authorization in DocumentService CVE-2026-109201 8.7 HighOctober 12, 2026
• logicaldoc community edition LogicalDOC Community Edition through 9.3 SSRF via XMLConverter xml-stylesheet href CVE-2026-109200 5.3 MediumOctober 12, 2026
• logicaldoc community edition LogicalDOC Community Edition through 9.3 Code Injection via Velocity sendAsEmail Template CVE-2026-109199 8.7 HighOctober 12, 2026
• logicaldoc community edition LogicalDOC Community Edition through 9.3 HQL Injection via documents.xml indexed Parameter CVE-2026-109170 7.1 HighOctober 12, 2026
• logicaldoc community edition LogicalDOC Community Edition through 9.3 SQL Injection via tags.xml firstLetter CVE-2026-109169 7.1 HighOctober 12, 2026
• logicaldoc community edition, logicaldoc +1 more LogicalDOC Community Edition Admin Login login.jsp excessive authentication CVE-2025-12547 6.3 MediumOctober 31, 2025
• logicaldoc community edition, logicaldoc +1 more LogicalDOC Community Edition API Key creation UI cross site scripting CVE-2025-12546 5.1 MediumOctober 31, 2025
• logicaldoc community edition, logicaldoc +1 more LogicalDOC Community Edition Add Contact frontend.jsp cross site scripting CVE-2025-11946 5.1 MediumOctober 19, 2025
• logicaldoc, logicaldoc community edition, enterprise +2 more LogicalDOC Document Version Comment Stored XSS CVE-2022-47418 5.4 MediumFebruary 7, 2023
• logicaldoc, logicaldoc community edition, enterprise +2 more LogicalDOC Document File Name Stored XSS CVE-2022-47417 5.4 MediumFebruary 7, 2023
• logicaldoc, logicaldoc community edition, enterprise +2 more LogicalDOC Messaging Stored XSS CVE-2022-47415 5.4 MediumFebruary 7, 2023