LogicalDOC LogicalDOC Community Edition

• CVE-2026-109206 Medium 5.3 LogicalDOC Community Edition through 9.3 Username Enumeration via AvatarServlet 0.2%
• CVE-2026-109205 High 7.5 LogicalDOC Community Edition through 9.3 Unauthenticated Upload Disk Exhaustion via UploadServlet 0.4%
• CVE-2026-109204 Medium 6.3 LogicalDOC Community Edition through 9.3 Forced Password Reset via Unbound PswRecovery Ticket 0.2%
• CVE-2026-109203 Medium 6.5 LogicalDOC Community Edition through 9.3 Missing Authorization via ConvertPdf Servlet 0.2%
• CVE-2026-109202 Medium 6.5 LogicalDOC Community Edition through 9.3 Missing Authorization via zip-export Servlet 0.3%
• CVE-2026-109201 High 8.3 LogicalDOC Community Edition through 9.3 Missing Authorization in DocumentService 0.3%
• CVE-2026-109200 Medium 6.4 LogicalDOC Community Edition through 9.3 SSRF via XMLConverter xml-stylesheet href 0.2%
• CVE-2026-109199 High 8.8 LogicalDOC Community Edition through 9.3 Code Injection via Velocity sendAsEmail Template 0.4%
• CVE-2026-109170 Medium 6.5 LogicalDOC Community Edition through 9.3 HQL Injection via documents.xml indexed Parameter 0.3%
• CVE-2026-109169 Medium 6.5 LogicalDOC Community Edition through 9.3 SQL Injection via tags.xml firstLetter 0.3%
• CVE-2022-47418 Medium 5.4 LogicalDOC Document Version Comment Stored XSS 0.5%
• CVE-2022-47417 Medium 5.4 LogicalDOC Document File Name Stored XSS 0.5%
• CVE-2022-47415 Medium 5.4 LogicalDOC Messaging Stored XSS 0.5%