LogicalDOC vulnerabilities

CVEs per yearBy the year they were published

1. 20234
2. 202511
3. 202610

Newest CVEs

• CVE-2026-109206

  LogicalDOC Community Edition through 9.3 Username Enumeration via AvatarServlet

  LogicalDOC · LogicalDOC Community Edition

  Medium6.9
• CVE-2026-109205

  LogicalDOC Community Edition through 9.3 Unauthenticated Upload Disk Exhaustion via UploadServlet

  LogicalDOC · LogicalDOC Community Edition

  High8.7
• CVE-2026-109204

  LogicalDOC Community Edition through 9.3 Forced Password Reset via Unbound PswRecovery Ticket

  LogicalDOC · LogicalDOC Community Edition

  Medium5.3
• CVE-2026-109203

  LogicalDOC Community Edition through 9.3 Missing Authorization via ConvertPdf Servlet

  LogicalDOC · LogicalDOC Community Edition

  High7.1
• CVE-2026-109202

  LogicalDOC Community Edition through 9.3 Missing Authorization via zip-export Servlet

  LogicalDOC · LogicalDOC Community Edition

  High7.1
• CVE-2026-109201

  LogicalDOC Community Edition through 9.3 Missing Authorization in DocumentService

  LogicalDOC · LogicalDOC Community Edition

  High8.7
• CVE-2026-109200

  LogicalDOC Community Edition through 9.3 SSRF via XMLConverter xml-stylesheet href

  LogicalDOC · LogicalDOC Community Edition

  Medium5.3
• CVE-2026-109199

  LogicalDOC Community Edition through 9.3 Code Injection via Velocity sendAsEmail Template

  LogicalDOC · LogicalDOC Community Edition

  High8.7
• CVE-2026-109170

  LogicalDOC Community Edition through 9.3 HQL Injection via documents.xml indexed Parameter

  LogicalDOC · LogicalDOC Community Edition

  High7.1
• CVE-2026-109169

  LogicalDOC Community Edition through 9.3 SQL Injection via tags.xml firstLetter

  LogicalDOC · LogicalDOC Community Edition

  High7.1