[ Vendor · 10 CVEs ]
LogicalDOC
CVEs affecting LogicalDOC published in the last 30 days, plus any LogicalDOC CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-109204 | 12 Oct 2026 | CVSS 6.3 | LogicalDOC Community EditionLogicalDOC Community Edition through 9.3 contains an improper authorization vulnerability in the PswRecovery servlet that fails to bind password… | |
| CVE-2026-109205 | 12 Oct 2026 | CVSS 7.5 | LogicalDOC Community EditionLogicalDOC Community Edition through 9.3 contains an unauthenticated file upload vulnerability in the UploadServlet that allows remote attackers to… | |
| CVE-2026-109206 | 12 Oct 2026 | CVSS 5.3 | LogicalDOC Community EditionLogicalDOC Community Edition through 9.3 contains a username enumeration vulnerability that allows unauthenticated attackers to identify valid… | |
| CVE-2026-109169 | 12 Oct 2026 | CVSS 6.5 | LogicalDOC Community EditionLogicalDOC Community Edition through 9.3 contains a sql injection vulnerability that allows authenticated users to execute crafted SQL via the… | |
| CVE-2026-109170 | 12 Oct 2026 | CVSS 6.5 | LogicalDOC Community EditionLogicalDOC Community Edition through 9.3 contains an HQL injection vulnerability in DocumentsDataServlet that allows authenticated users to… | |
| CVE-2026-109199 | 12 Oct 2026 | CVSS 8.8 | LogicalDOC Community EditionLogicalDOC Community Edition through 9.3 contains a code injection vulnerability that allows authenticated users to execute OS commands by submitting… | |
| CVE-2026-109200 | 12 Oct 2026 | CVSS 6.4 | LogicalDOC Community EditionLogicalDOC Community Edition through 9.3 contains a server-side request forgery vulnerability in the default-enabled XMLConverter that fetches… | |
| CVE-2026-109201 | 12 Oct 2026 | CVSS 8.3 | LogicalDOC Community EditionLogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in SoapDocumentService operations that allows authenticated… | |
| CVE-2026-109202 | 12 Oct 2026 | CVSS 6.5 | LogicalDOC Community EditionLogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in the zip-export servlet that allows authenticated users to… | |
| CVE-2026-109203 | 12 Oct 2026 | CVSS 6.5 | LogicalDOC Community EditionLogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in the ConvertPdf servlet that allows authenticated users to… |