Log in Start free

LogicalDOC

Products

ProductCVEsExploitedLatest
LogicalDOC Community Edition13–Oct 12, 2026
LogicalDOC Enterprise12–Mar 14, 2025
LogicalDOC Community7–Mar 14, 2025
Community Edition3–Oct 31, 2025

Exploited and recent CVEs

  • CVE-2026-109206 Medium 5.3 LogicalDOC Community Edition through 9.3 Username Enumeration via AvatarServlet 0.2%
  • CVE-2026-109205 High 7.5 LogicalDOC Community Edition through 9.3 Unauthenticated Upload Disk Exhaustion via UploadServlet 0.4%
  • CVE-2026-109204 Medium 6.3 LogicalDOC Community Edition through 9.3 Forced Password Reset via Unbound PswRecovery Ticket 0.2%
  • CVE-2026-109203 Medium 6.5 LogicalDOC Community Edition through 9.3 Missing Authorization via ConvertPdf Servlet 0.2%
  • CVE-2026-109202 Medium 6.5 LogicalDOC Community Edition through 9.3 Missing Authorization via zip-export Servlet 0.3%
  • CVE-2026-109201 High 8.3 LogicalDOC Community Edition through 9.3 Missing Authorization in DocumentService 0.3%
  • CVE-2026-109200 Medium 6.4 LogicalDOC Community Edition through 9.3 SSRF via XMLConverter xml-stylesheet href 0.2%
  • CVE-2026-109199 High 8.8 LogicalDOC Community Edition through 9.3 Code Injection via Velocity sendAsEmail Template 0.4%
  • CVE-2026-109170 Medium 6.5 LogicalDOC Community Edition through 9.3 HQL Injection via documents.xml indexed Parameter 0.3%
  • CVE-2026-109169 Medium 6.5 LogicalDOC Community Edition through 9.3 SQL Injection via tags.xml firstLetter 0.3%
  • CVE-2025-12547 Low 3.7 LogicalDOC Community Edition Admin Login login.jsp excessive authentication 0.8%
  • CVE-2025-12546 Low 3.5 LogicalDOC Community Edition API Key creation UI cross site scripting 0.3%
  • CVE-2025-11946 Low 3.5 LogicalDOC Community Edition Add Contact frontend.jsp cross site scripting 0.4%
  • CVE-2024-12245 High 8.7 Blind SQL Injection in Logout 0.4%
  • CVE-2024-12245 High 8.7 Blind SQL Injection in Logout 0.4%
  • CVE-2024-12020 Medium 6.4 Reflected Cross-Site Scripting (XSS) 0.3%
  • CVE-2024-12019 High 7.1 Arbitrary File Read via Document API 0.5%
  • CVE-2024-12019 High 7.1 Arbitrary File Read via Document API 0.5%
  • CVE-2024-54449 High 8.7 Remote Code Execution (RCE) via Arbitrary File Write In Document API 0.6%
  • CVE-2024-54449 High 8.7 Remote Code Execution (RCE) via Arbitrary File Write In Document API 0.6%
  • CVE-2024-54448 High 8.6 Remote Code Execution (RCE) via Automation Scripting 0.6%
  • CVE-2024-54448 High 8.6 Remote Code Execution (RCE) via Automation Scripting 0.6%
  • CVE-2024-54447 High 7.1 Blind SQLi in Saved Search 0.3%
  • CVE-2024-54447 High 7.1 Blind SQLi in Saved Search 0.3%
  • CVE-2024-54446 High 7.1 Blind SQLi in Document History 0.3%
  • CVE-2024-54446 High 7.1 Blind SQLi in Document History 0.3%
  • CVE-2024-54445 High 8.7 Blind SQLi in Login 0.4%
  • CVE-2024-54445 High 8.7 Blind SQLi in Login 0.4%
  • CVE-2022-47418 Medium 5.4 LogicalDOC Document Version Comment Stored XSS 0.5%
  • CVE-2022-47418 Medium 5.4 LogicalDOC Document Version Comment Stored XSS 0.5%