Advisories · Technology
LogicalDOC Community Edition.
Every CVE that names LogicalDOC Community Edition among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
LogicalDOC Community Edition through 9.3 Username Enumeration via AvatarServlet
- LogicalDOC Community Edition
- CWE-204
- CVSS 8.7 High
LogicalDOC Community Edition through 9.3 Unauthenticated Upload Disk Exhaustion via UploadServlet
- LogicalDOC Community Edition
- Denial of service
- CVSS 5.3 Medium
LogicalDOC Community Edition through 9.3 Forced Password Reset via Unbound PswRecovery Ticket
- LogicalDOC Community Edition
- CWE-640
- CVSS 7.1 High
LogicalDOC Community Edition through 9.3 Missing Authorization via ConvertPdf Servlet
- LogicalDOC Community Edition
- Broken access control
- CVSS 7.1 High
LogicalDOC Community Edition through 9.3 Missing Authorization via zip-export Servlet
- LogicalDOC Community Edition
- Broken access control
- CVSS 8.7 High
LogicalDOC Community Edition through 9.3 Missing Authorization in DocumentService
- LogicalDOC Community Edition
- Broken access control
- CVSS 5.3 Medium
LogicalDOC Community Edition through 9.3 SSRF via XMLConverter xml-stylesheet href
- LogicalDOC Community Edition
- Server-side request forgery (SSRF)
- CVSS 8.7 High
LogicalDOC Community Edition through 9.3 Code Injection via Velocity sendAsEmail Template
- LogicalDOC Community Edition
- Code injection
- CVSS 7.1 High
LogicalDOC Community Edition through 9.3 HQL Injection via documents.xml indexed Parameter
- LogicalDOC Community Edition
- SQL injection
- CVSS 7.1 High
LogicalDOC Community Edition through 9.3 SQL Injection via tags.xml firstLetter
- LogicalDOC Community Edition
- SQL injection
- CVSS 6.3 Medium
LogicalDOC Community Edition Admin Login login.jsp excessive authentication
- LogicalDOC Community Edition
- Authentication bypass
- CWE-799
- CVSS 5.1 Medium
LogicalDOC Community Edition API Key creation UI cross site scripting
- LogicalDOC Community Edition
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
LogicalDOC Community Edition Add Contact frontend.jsp cross site scripting
- LogicalDOC Community Edition
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.4 Medium
LogicalDOC Document Version Comment Stored XSS
- LogicalDOC Enterprise
- LogicalDOC Community Edition
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
LogicalDOC Document File Name Stored XSS
- LogicalDOC Enterprise
- LogicalDOC Community Edition
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
LogicalDOC Messaging Stored XSS
- LogicalDOC Enterprise
- LogicalDOC Community Edition
- Cross-site scripting (XSS)