Logicaldoc Community vulnerabilities

• logicaldoc community edition LogicalDOC Community Edition through 9.3 Username Enumeration via AvatarServlet CVE-2026-109206 6.9 MediumOctober 12, 2026
• logicaldoc community edition LogicalDOC Community Edition through 9.3 Unauthenticated Upload Disk Exhaustion via UploadServlet CVE-2026-109205 8.7 HighOctober 12, 2026
• logicaldoc community edition LogicalDOC Community Edition through 9.3 Forced Password Reset via Unbound PswRecovery Ticket CVE-2026-109204 5.3 MediumOctober 12, 2026
• logicaldoc community edition LogicalDOC Community Edition through 9.3 Missing Authorization via ConvertPdf Servlet CVE-2026-109203 7.1 HighOctober 12, 2026
• logicaldoc community edition LogicalDOC Community Edition through 9.3 Missing Authorization via zip-export Servlet CVE-2026-109202 7.1 HighOctober 12, 2026
• logicaldoc community edition LogicalDOC Community Edition through 9.3 Missing Authorization in DocumentService CVE-2026-109201 8.7 HighOctober 12, 2026
• logicaldoc community edition LogicalDOC Community Edition through 9.3 SSRF via XMLConverter xml-stylesheet href CVE-2026-109200 5.3 MediumOctober 12, 2026
• logicaldoc community edition LogicalDOC Community Edition through 9.3 Code Injection via Velocity sendAsEmail Template CVE-2026-109199 8.7 HighOctober 12, 2026
• logicaldoc community edition LogicalDOC Community Edition through 9.3 HQL Injection via documents.xml indexed Parameter CVE-2026-109170 7.1 HighOctober 12, 2026
• logicaldoc community edition LogicalDOC Community Edition through 9.3 SQL Injection via tags.xml firstLetter CVE-2026-109169 7.1 HighOctober 12, 2026
• logicaldoc community, enterprise +1 more Blind SQL Injection in Logout CVE-2024-12245 8.7 HighMarch 14, 2025
• logicaldoc community, enterprise +1 more Arbitrary File Read via Document API CVE-2024-12019 7.1 HighMarch 14, 2025
• logicaldoc, logicaldoc community, enterprise +2 more Remote Code Execution (RCE) via Arbitrary File Write In Document API CVE-2024-54449 8.7 HighMarch 14, 2025
• logicaldoc, logicaldoc community, enterprise +2 more Remote Code Execution (RCE) via Automation Scripting CVE-2024-54448 8.6 HighMarch 14, 2025
• logicaldoc community, enterprise +1 more Blind SQLi in Saved Search CVE-2024-54447 7.1 HighMarch 14, 2025
• logicaldoc community, enterprise +1 more Blind SQLi in Document History CVE-2024-54446 7.1 HighMarch 14, 2025
• logicaldoc community, enterprise +1 more Blind SQLi in Login CVE-2024-54445 8.7 HighMarch 14, 2025
• logicaldoc, logicaldoc community edition, enterprise +2 more LogicalDOC Document Version Comment Stored XSS CVE-2022-47418 5.4 MediumFebruary 7, 2023
• logicaldoc, logicaldoc community edition, enterprise +2 more LogicalDOC Document File Name Stored XSS CVE-2022-47417 5.4 MediumFebruary 7, 2023
• logicaldoc, logicaldoc community edition, enterprise +2 more LogicalDOC Messaging Stored XSS CVE-2022-47415 5.4 MediumFebruary 7, 2023