Advisories · Technology
LogicalDOC Enterprise.
Every CVE that names LogicalDOC Enterprise among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
Blind SQL Injection in Logout
- LogicalDOC Community
- LogicalDOC Enterprise
- SQL injection
- CVSS 6.4 Medium
Reflected Cross-Site Scripting (XSS)
- LogicalDOC Enterprise
- Cross-site scripting (XSS)
- CVSS 7.1 High
Arbitrary File Read via Document API
- LogicalDOC Community
- LogicalDOC Enterprise
- Path traversal
- CVSS 8.7 High
Remote Code Execution (RCE) via Arbitrary File Write In Document API
- LogicalDOC Community
- LogicalDOC Enterprise
- Path traversal
- CVSS 8.6 High
Remote Code Execution (RCE) via Automation Scripting
- LogicalDOC Community
- LogicalDOC Enterprise
- Code injection
- CVSS 7.1 High
Blind SQLi in Saved Search
- LogicalDOC Community
- LogicalDOC Enterprise
- SQL injection
- CVSS 7.1 High
Blind SQLi in Document History
- LogicalDOC Community
- LogicalDOC Enterprise
- SQL injection
- CVSS 8.7 High
Blind SQLi in Login
- LogicalDOC Community
- LogicalDOC Enterprise
- SQL injection
- CVSS 5.4 Medium
LogicalDOC Document Version Comment Stored XSS
- LogicalDOC Enterprise
- LogicalDOC Community Edition
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
LogicalDOC Document File Name Stored XSS
- LogicalDOC Enterprise
- LogicalDOC Community Edition
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
LogicalDOC Chat Stored XSS
- LogicalDOC Enterprise
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
LogicalDOC Messaging Stored XSS
- LogicalDOC Enterprise
- LogicalDOC Community Edition
- Cross-site scripting (XSS)