Logicaldoc vulnerabilities
27 CVEs and advisories name Logicaldoc as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-109206LogicalDOC Community Edition through 9.3 Username Enumeration via AvatarServlet
- CVE-2026-109205LogicalDOC Community Edition through 9.3 Unauthenticated Upload Disk Exhaustion via UploadServlet
- CVE-2026-109204LogicalDOC Community Edition through 9.3 Forced Password Reset via Unbound PswRecovery Ticket
- CVE-2026-109203LogicalDOC Community Edition through 9.3 Missing Authorization via ConvertPdf Servlet
- CVE-2026-109202LogicalDOC Community Edition through 9.3 Missing Authorization via zip-export Servlet
- CVE-2026-109201LogicalDOC Community Edition through 9.3 Missing Authorization in DocumentService
- CVE-2026-109200LogicalDOC Community Edition through 9.3 SSRF via XMLConverter xml-stylesheet href
- CVE-2026-109199LogicalDOC Community Edition through 9.3 Code Injection via Velocity sendAsEmail Template
- CVE-2026-109170LogicalDOC Community Edition through 9.3 HQL Injection via documents.xml indexed Parameter
- CVE-2026-109169LogicalDOC Community Edition through 9.3 SQL Injection via tags.xml firstLetter
- CVE-2019-25258LogicalDOC Enterprise 7.7.4 Multiple Post-Authentication Directory Traversal Vulnerabilities
- CVE-2019-25257LogicalDOC Enterprise 7.7.4 Authenticated Command Execution via Binary Path Manipulation
- CVE-2025-12547LogicalDOC Community Edition Admin Login login.jsp excessive authentication
- CVE-2025-12546LogicalDOC Community Edition API Key creation UI cross site scripting
- CVE-2025-11946LogicalDOC Community Edition Add Contact frontend.jsp cross site scripting
- CVE-2024-12245Blind SQL Injection in Logout
- CVE-2024-12020Reflected Cross-Site Scripting (XSS)
- CVE-2024-12019Arbitrary File Read via Document API
- CVE-2024-54449Remote Code Execution (RCE) via Arbitrary File Write In Document API
- CVE-2024-54448Remote Code Execution (RCE) via Automation Scripting
- CVE-2024-54447Blind SQLi in Saved Search
- CVE-2024-54446Blind SQLi in Document History
- CVE-2024-54445Blind SQLi in Login
- CVE-2022-47418LogicalDOC Document Version Comment Stored XSS
- CVE-2022-47417LogicalDOC Document File Name Stored XSS
- CVE-2022-47416LogicalDOC Chat Stored XSS
- CVE-2022-47415LogicalDOC Messaging Stored XSS