Vulnerabilities in LogicalDOC
25 resultsCVE-2025-12547MEDIUMLogicalDOC Community Edition Admin Login login.jsp excessive authenticationEPSS 0.8%CVE-2024-54449HIGHRemote Code Execution (RCE) via Arbitrary File Write In Document APIEPSS 0.6%CVE-2024-54448HIGHRemote Code Execution (RCE) via Automation ScriptingEPSS 0.6%CVE-2022-47418MEDIUMLogicalDOC Document Version Comment Stored XSSEPSS 0.5%CVE-2022-47416MEDIUMLogicalDOC Chat Stored XSSEPSS 0.5%CVE-2022-47417MEDIUMLogicalDOC Document File Name Stored XSSEPSS 0.5%CVE-2022-47415MEDIUMLogicalDOC Messaging Stored XSSEPSS 0.5%CVE-2024-12019HIGHArbitrary File Read via Document APIEPSS 0.5%CVE-2026-109205HIGHLogicalDOC Community Edition through 9.3 Unauthenticated Upload Disk Exhaustion via UploadServletEPSS 0.4%CVE-2026-109199HIGHLogicalDOC Community Edition through 9.3 Code Injection via Velocity sendAsEmail TemplateEPSS 0.4%CVE-2024-12245HIGHBlind SQL Injection in LogoutEPSS 0.4%CVE-2024-54445HIGHBlind SQLi in LoginEPSS 0.4%CVE-2025-11946MEDIUMLogicalDOC Community Edition Add Contact frontend.jsp cross site scriptingEPSS 0.4%CVE-2024-54447HIGHBlind SQLi in Saved SearchEPSS 0.3%CVE-2024-54446HIGHBlind SQLi in Document HistoryEPSS 0.3%CVE-2025-12546MEDIUMLogicalDOC Community Edition API Key creation UI cross site scriptingEPSS 0.3%CVE-2026-109170HIGHLogicalDOC Community Edition through 9.3 HQL Injection via documents.xml indexed ParameterEPSS 0.3%CVE-2026-109169HIGHLogicalDOC Community Edition through 9.3 SQL Injection via tags.xml firstLetterEPSS 0.3%CVE-2024-12020MEDIUMReflected Cross-Site Scripting (XSS)EPSS 0.3%CVE-2026-109202HIGHLogicalDOC Community Edition through 9.3 Missing Authorization via zip-export ServletEPSS 0.3%